@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/codeguru-security.json

@@ -1,4 +1,20 @@
 {
+  "deletescansbycategory": {
+    "name": "DeleteScansByCategory",
+    "description": "Grants permission to delete all the scans and related findings from CodeGuru Security by given category",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfindings": {
+    "name": "ListFindings",
+    "description": "Grants permission to retrieve findings generated by CodeGuru Security",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetfindings": {
     "name": "BatchGetFindings",
     "description": "Grants permission to batch retrieve specific findings generated by CodeGuru Security",
@@ -27,8 +43,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -47,15 +63,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletescansbycategory": {
-    "name": "DeleteScansByCategory",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete all the scans and related findings from CodeGuru Security by given category",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getaccountconfiguration": {
     "name": "GetAccountConfiguration",
     "description": "Grants permission to retrieve the account level configurations",
@@ -104,15 +111,6 @@
     ],
     "dependentActions": []
   },
-  "listfindings": {
-    "name": "ListFindings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve findings generated by CodeGuru Security",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listfindingsmetrics": {
     "name": "ListFindingsMetrics",
     "description": "Grants permission to retrieve a list of account level findings metrics within a date range",
@@ -149,7 +147,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a scan name ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ScanName",
@@ -159,15 +157,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a scan name ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ScanName",

package/data/actions/codeguru.json

@@ -1,7 +1,6 @@
 {
   "getcodegurufreetrialsummary": {
     "name": "GetCodeGuruFreeTrialSummary",
-    "isPermissionOnly": true,
     "description": "Grants permission to get free trial summary for the CodeGuru service which includes expiration date",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/codepipeline.json

@@ -538,7 +538,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a CodePipeline resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "actiontype",
@@ -568,7 +568,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from a CodePipeline resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "actiontype",

package/data/actions/codestar-connections.json

@@ -1,4 +1,133 @@
 {
+  "getconnectiontoken": {
+    "name": "GetConnectionToken",
+    "description": "Grants permission to get a Connection token to call provider actions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getindividualaccesstoken": {
+    "name": "GetIndividualAccessToken",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codestar-connections:ProviderType"
+    ],
+    "dependentActions": []
+  },
+  "getinstallationurl": {
+    "name": "GetInstallationUrl",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codestar-connections:ProviderType"
+    ],
+    "dependentActions": []
+  },
+  "listinstallationtargets": {
+    "name": "ListInstallationTargets",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "passconnection": {
+    "name": "PassConnection",
+    "description": "Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codestar-connections:PassedToService"
+    ],
+    "dependentActions": []
+  },
+  "passrepository": {
+    "name": "PassRepository",
+    "description": "Grants permission to pass a repository link resource to an AWS service that accepts a RepositoryLinkId as input, such as codestar-connections:CreateSyncConfiguration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RepositoryLink",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codestar-connections:PassedToService"
+    ],
+    "dependentActions": []
+  },
+  "registerappcode": {
+    "name": "RegisterAppCode",
+    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codestar-connections:HostArn"
+    ],
+    "dependentActions": []
+  },
+  "startappregistrationhandshake": {
+    "name": "StartAppRegistrationHandshake",
+    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codestar-connections:HostArn"
+    ],
+    "dependentActions": []
+  },
+  "startoauthhandshake": {
+    "name": "StartOAuthHandshake",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codestar-connections:ProviderType"
+    ],
+    "dependentActions": []
+  },
+  "useconnection": {
+    "name": "UseConnection",
+    "description": "Grants permission to use a Connection resource to call provider actions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codestar-connections:BranchName",
+      "codestar-connections:FullRepositoryId",
+      "codestar-connections:OwnerId",
+      "codestar-connections:ProviderAction",
+      "codestar-connections:ProviderPermissionsRequired",
+      "codestar-connections:RepositoryName"
+    ],
+    "dependentActions": []
+  },
   "createconnection": {
     "name": "CreateConnection",
     "description": "Grants permission to create a Connection resource",
@@ -33,10 +162,7 @@
         "name": "Connection",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codestar-connections:PassConnection",
-          "codestar-connections:UseConnection"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -54,10 +180,7 @@
         "name": "RepositoryLink",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codestar-connections:PassRepository",
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -133,22 +256,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getconnectiontoken": {
-    "name": "GetConnectionToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get a Connection token to call provider actions",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "gethost": {
     "name": "GetHost",
     "description": "Grants permission to get details about a host resource",
@@ -164,30 +271,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getindividualaccesstoken": {
-    "name": "GetIndividualAccessToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codestar-connections:ProviderType"
-    ],
-    "dependentActions": [
-      "codestar-connections:StartOAuthHandshake"
-    ]
-  },
-  "getinstallationurl": {
-    "name": "GetInstallationUrl",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codestar-connections:ProviderType"
-    ],
-    "dependentActions": []
-  },
   "getrepositorylink": {
     "name": "GetRepositoryLink",
     "description": "Grants permission to describe a repository link",
@@ -271,18 +354,6 @@
     ],
     "dependentActions": []
   },
-  "listinstallationtargets": {
-    "name": "ListInstallationTargets",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": [
-      "codestar-connections:GetIndividualAccessToken",
-      "codestar-connections:StartOAuthHandshake"
-    ]
-  },
   "listrepositorylinks": {
     "name": "ListRepositoryLinks",
     "description": "Grants permission to list repository links",
@@ -334,79 +405,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "passconnection": {
-    "name": "PassConnection",
-    "isPermissionOnly": true,
-    "description": "Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codestar-connections:PassedToService"
-    ],
-    "dependentActions": []
-  },
-  "passrepository": {
-    "name": "PassRepository",
-    "isPermissionOnly": true,
-    "description": "Grants permission to pass a repository link resource to an AWS service that accepts a RepositoryLinkId as input, such as codestar-connections:CreateSyncConfiguration",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "RepositoryLink",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codestar-connections:PassedToService"
-    ],
-    "dependentActions": []
-  },
-  "registerappcode": {
-    "name": "RegisterAppCode",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codestar-connections:HostArn"
-    ],
-    "dependentActions": []
-  },
-  "startappregistrationhandshake": {
-    "name": "StartAppRegistrationHandshake",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codestar-connections:HostArn"
-    ],
-    "dependentActions": []
-  },
-  "startoauthhandshake": {
-    "name": "StartOAuthHandshake",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codestar-connections:ProviderType"
-    ],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or modify the tags of the given resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Connection",
@@ -428,15 +430,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an AWS resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Connection",
@@ -471,12 +473,7 @@
         "name": "Connection",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codestar-connections:GetIndividualAccessToken",
-          "codestar-connections:GetInstallationUrl",
-          "codestar-connections:ListInstallationTargets",
-          "codestar-connections:StartOAuthHandshake"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -533,28 +530,5 @@
       "codestar-connections:Branch"
     ],
     "dependentActions": []
-  },
-  "useconnection": {
-    "name": "UseConnection",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a Connection resource to call provider actions",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codestar-connections:BranchName",
-      "codestar-connections:FullRepositoryId",
-      "codestar-connections:OwnerId",
-      "codestar-connections:ProviderAction",
-      "codestar-connections:ProviderPermissionsRequired",
-      "codestar-connections:RepositoryName"
-    ],
-    "dependentActions": []
   }
 }

package/data/actions/codestar-notifications.json

@@ -32,8 +32,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "codestar-notifications:NotificationsForResource"
     ],
@@ -63,8 +63,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "codestar-notifications:NotificationsForResource"
     ],
@@ -128,8 +128,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "codestar-notifications:NotificationsForResource"
     ],
@@ -138,7 +138,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to attach resource tags to a notification rule resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "notificationrule",
@@ -148,8 +148,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -167,8 +167,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "codestar-notifications:NotificationsForResource"
     ],
@@ -177,7 +177,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to disassociate resource tags from a notification rule resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "notificationrule",
@@ -205,8 +205,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "codestar-notifications:NotificationsForResource"
     ],