@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/cognito-idp.json

@@ -1,4 +1,70 @@
 {
+  "associatewebacl": {
+    "name": "AssociateWebACL",
+    "description": "Grants permission to associate the user pool with an AWS WAF web ACL",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "webacl",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatewebacl": {
+    "name": "DisassociateWebACL",
+    "description": "Grants permission to disassociate the user pool with an AWS WAF web ACL",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getwebaclforresource": {
+    "name": "GetWebACLForResource",
+    "description": "Grants permission to get the AWS WAF web ACL that is associated with an Amazon Cognito user pool",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresourcesforwebacl": {
+    "name": "ListResourcesForWebACL",
+    "description": "Grants permission to list the user pools that are associated with an AWS WAF web ACL",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "webacl",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addcustomattributes": {
     "name": "AddCustomAttributes",
     "description": "Grants permission to add user attributes to the user pool schema",
@@ -427,28 +493,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "associatewebacl": {
-    "name": "AssociateWebACL",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate the user pool with an AWS WAF web ACL",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "userpool",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "webacl",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "changepassword": {
     "name": "ChangePassword",
     "description": "Grants permission to change the password for a specified user in a user pool",
@@ -578,8 +622,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -937,22 +981,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "disassociatewebacl": {
-    "name": "DisassociateWebACL",
-    "isPermissionOnly": true,
-    "description": "Grants permission to disassociate the user pool with an AWS WAF web ACL",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "userpool",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "forgetdevice": {
     "name": "ForgetDevice",
     "description": "Grants permission to forget the specified device",
@@ -1037,6 +1065,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getprovisionedlimit": {
+    "name": "GetProvisionedLimit",
+    "description": "Grants permission to get a provisioned limit for the AWS account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsigningcertificate": {
     "name": "GetSigningCertificate",
     "description": "Grants permission to look up signing certificates for user pools",
@@ -1106,22 +1142,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getwebaclforresource": {
-    "name": "GetWebACLForResource",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the AWS WAF web ACL that is associated with an Amazon Cognito user pool",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "userpool",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "globalsignout": {
     "name": "GlobalSignOut",
     "description": "Grants permission to sign out users from all devices",
@@ -1191,22 +1211,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listresourcesforwebacl": {
-    "name": "ListResourcesForWebACL",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list the user pools that are associated with an AWS WAF web ACL",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "webacl",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags that are assigned to an Amazon Cognito user pool",
@@ -1476,7 +1480,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a user pool",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "userpool",
@@ -1494,7 +1498,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a user pool",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "userpool",
@@ -1576,6 +1580,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateprovisionedlimit": {
+    "name": "UpdateProvisionedLimit",
+    "description": "Grants permission to update a provisioned limit for the AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateresourceserver": {
     "name": "UpdateResourceServer",
     "description": "Grants permission to update the configuration of any OAuth 2.0 resource server",

package/data/actions/cognito-sync.json

@@ -1,4 +1,27 @@
 {
+  "queryrecords": {
+    "name": "QueryRecords",
+    "description": "Grants permission to query records",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "setdatasetconfiguration": {
+    "name": "SetDatasetConfiguration",
+    "description": "Grants permission to configure datasets",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dataset",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "bulkpublish": {
     "name": "BulkPublish",
     "description": "Grants permission to initiate a bulk publish of all existing datasets for an Identity Pool to the configured stream",
@@ -164,15 +187,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "queryrecords": {
-    "name": "QueryRecords",
-    "isPermissionOnly": true,
-    "description": "Grants permission to query records",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "registerdevice": {
     "name": "RegisterDevice",
     "description": "Grants permission to register a device to receive push sync notifications",
@@ -203,22 +217,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "setdatasetconfiguration": {
-    "name": "SetDatasetConfiguration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to configure datasets",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "dataset",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "setidentitypoolconfiguration": {
     "name": "SetIdentityPoolConfiguration",
     "description": "Grants permission to set the necessary configuration for push sync",

package/data/actions/comprehend.json

@@ -103,9 +103,9 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:ModelKmsKey",
       "comprehend:OutputKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -171,8 +171,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:ModelKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -183,20 +183,6 @@
     "description": "Grants permission to create a new flywheel that you can use to train model versions",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "flywheel",
-        "required": true,
-        "conditionKeys": [
-          "aws:RequestTag/${TagKey}",
-          "aws:TagKeys",
-          "comprehend:VolumeKmsKey",
-          "comprehend:ModelKmsKey",
-          "comprehend:DataLakeKmsKey",
-          "comprehend:VpcSecurityGroupIds",
-          "comprehend:VpcSubnets"
-        ],
-        "dependentActions": []
-      },
       {
         "name": "document-classifier",
         "required": false,
@@ -208,6 +194,20 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "flywheel",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys",
+          "comprehend:DataLakeKmsKey",
+          "comprehend:ModelKmsKey",
+          "comprehend:VolumeKmsKey",
+          "comprehend:VpcSecurityGroupIds",
+          "comprehend:VpcSubnets"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -931,8 +931,8 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
-          "comprehend:VolumeKmsKey",
           "comprehend:OutputKmsKey",
+          "comprehend:VolumeKmsKey",
           "comprehend:VpcSecurityGroupIds",
           "comprehend:VpcSubnets"
         ],
@@ -969,8 +969,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:OutputKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -987,8 +987,8 @@
         "conditionKeys": [
           "aws:RequestTag/${TagKey}",
           "aws:TagKeys",
-          "comprehend:VolumeKmsKey",
           "comprehend:OutputKmsKey",
+          "comprehend:VolumeKmsKey",
           "comprehend:VpcSecurityGroupIds",
           "comprehend:VpcSubnets"
         ],
@@ -1059,8 +1059,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:OutputKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -1100,8 +1100,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:OutputKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -1122,8 +1122,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:OutputKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -1144,8 +1144,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "comprehend:VolumeKmsKey",
       "comprehend:OutputKmsKey",
+      "comprehend:VolumeKmsKey",
       "comprehend:VpcSecurityGroupIds",
       "comprehend:VpcSubnets"
     ],
@@ -1289,7 +1289,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource with given key value pairs",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "document-classification-job",
@@ -1391,7 +1391,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource with given key",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "document-classification-job",
@@ -1521,17 +1521,6 @@
     "description": "Grants permission to Update a flywheel's configuration",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "flywheel",
-        "required": true,
-        "conditionKeys": [
-          "comprehend:VolumeKmsKey",
-          "comprehend:ModelKmsKey",
-          "comprehend:VpcSecurityGroupIds",
-          "comprehend:VpcSubnets"
-        ],
-        "dependentActions": []
-      },
       {
         "name": "document-classifier",
         "required": false,
@@ -1543,6 +1532,17 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "flywheel",
+        "required": true,
+        "conditionKeys": [
+          "comprehend:ModelKmsKey",
+          "comprehend:VolumeKmsKey",
+          "comprehend:VpcSecurityGroupIds",
+          "comprehend:VpcSubnets"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],