@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/cur.json

@@ -1,30 +1,6 @@
 {
-  "deletereportdefinition": {
-    "name": "DeleteReportDefinition",
-    "description": "Grants permission to delete Cost and Usage Report Definition",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "cur",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describereportdefinitions": {
-    "name": "DescribeReportDefinitions",
-    "description": "Grants permission to get Cost and Usage Report Definitions",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getclassicreport": {
     "name": "GetClassicReport",
-    "isPermissionOnly": true,
     "description": "Grants permission to get Bills CSV report",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -33,7 +9,6 @@
   },
   "getclassicreportpreferences": {
     "name": "GetClassicReportPreferences",
-    "isPermissionOnly": true,
     "description": "Grants permission to get the classic report enablement status for Usage Reports",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -42,13 +17,51 @@
   },
   "getusagereport": {
     "name": "GetUsageReport",
-    "isPermissionOnly": true,
     "description": "Grants permission to get list of AWS services, usage type and operation for the Usage Report workflow. Allows or denies download of usage reports too",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putclassicreportpreferences": {
+    "name": "PutClassicReportPreferences",
+    "description": "Grants permission to enable classic reports",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "validatereportdestination": {
+    "name": "ValidateReportDestination",
+    "description": "Grants permission to validates if the s3 bucket exists with appropriate permissions for CUR delivery",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletereportdefinition": {
+    "name": "DeleteReportDefinition",
+    "description": "Grants permission to delete Cost and Usage Report Definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cur",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describereportdefinitions": {
+    "name": "DescribeReportDefinitions",
+    "description": "Grants permission to get Cost and Usage Report Definitions",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
@@ -81,15 +94,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putclassicreportpreferences": {
-    "name": "PutClassicReportPreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to enable classic reports",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putreportdefinition": {
     "name": "PutReportDefinition",
     "description": "Grants permission to write Cost and Usage Report Definition",
@@ -98,21 +102,21 @@
       {
         "name": "cur",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cur",
@@ -122,16 +126,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cur",
@@ -141,18 +145,9 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
-  },
-  "validatereportdestination": {
-    "name": "ValidateReportDestination",
-    "isPermissionOnly": true,
-    "description": "Grants permission to validates if the s3 bucket exists with appropriate permissions for CUR delivery",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }

package/data/actions/customer-verification.json

@@ -1,7 +1,6 @@
 {
   "createcustomerverificationdetails": {
     "name": "CreateCustomerVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to create customer verification data",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "createuploadurls": {
     "name": "CreateUploadUrls",
-    "isPermissionOnly": true,
     "description": "Grants permission to create upload URLs",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "getcustomerverificationdetails": {
     "name": "GetCustomerVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to get customer verification data",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "getcustomerverificationeligibility": {
     "name": "GetCustomerVerificationEligibility",
-    "isPermissionOnly": true,
     "description": "Grants permission to get customer verification eligibility",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "updatecustomerverificationdetails": {
     "name": "UpdateCustomerVerificationDetails",
-    "isPermissionOnly": true,
     "description": "Grants permission to update customer verification data",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/databrew.json

@@ -21,8 +21,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -33,8 +33,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -45,8 +45,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -57,8 +57,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -69,8 +69,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -81,8 +81,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -93,8 +93,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -494,7 +494,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Dataset",
@@ -542,7 +542,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags associated with a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Dataset",

package/data/actions/dataexchange.json

@@ -1,26 +1,29 @@
 {
-  "acceptdatagrant": {
-    "name": "AcceptDataGrant",
-    "description": "Grants permission to accept a data grant",
+  "createasset": {
+    "name": "CreateAsset",
+    "description": "Grants permission to create an asset (for example, in a Job)",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "data-grants",
+        "name": "revisions",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
-  "canceljob": {
-    "name": "CancelJob",
-    "description": "Grants permission to cancel a job",
+  "publishdataset": {
+    "name": "PublishDataSet",
+    "description": "Grants permission to publish a data set to a product",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "jobs",
+        "name": "data-sets",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -29,14 +32,13 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createasset": {
-    "name": "CreateAsset",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an asset (for example, in a Job)",
+  "publishtodatagrant": {
+    "name": "PublishToDataGrant",
+    "description": "Grants permission to publish a data set to a data grant",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "revisions",
+        "name": "data-sets",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -48,6 +50,36 @@
     ],
     "dependentActions": []
   },
+  "acceptdatagrant": {
+    "name": "AcceptDataGrant",
+    "description": "Grants permission to accept a data grant",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "canceljob": {
+    "name": "CancelJob",
+    "description": "Grants permission to cancel a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "jobs",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdatagrant": {
     "name": "CreateDataGrant",
     "description": "Grants permission to create a data grant",
@@ -57,9 +89,7 @@
         "name": "data-grants",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "dataexchange:PublishToDataGrant"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -464,41 +494,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "publishdataset": {
-    "name": "PublishDataSet",
-    "isPermissionOnly": true,
-    "description": "Grants permission to publish a data set to a product",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "data-sets",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "publishtodatagrant": {
-    "name": "PublishToDataGrant",
-    "isPermissionOnly": true,
-    "description": "Grants permission to publish a data set to a data grant",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "data-sets",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
   "revokerevision": {
     "name": "RevokeRevision",
     "description": "Grants permission to revoke subscriber access to a revision",
@@ -563,20 +558,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "dataexchange:CreateAsset",
-      "dataexchange:DeleteDataSet",
-      "dataexchange:GetAsset",
-      "dataexchange:GetDataSet",
-      "dataexchange:GetRevision",
-      "dataexchange:PublishDataSet",
-      "redshift:AuthorizeDataShare"
-    ]
+    "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add one or more tags to a specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "assets",
@@ -618,7 +605,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove one or more tags from a specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "assets",
@@ -714,9 +701,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "dataexchange:PublishDataSet",
-      "dataexchange:PublishToDataGrant"
-    ]
+    "dependentActions": []
   }
 }

package/data/actions/datapipeline.json

@@ -1,4 +1,20 @@
 {
+  "getaccountlimits": {
+    "name": "GetAccountLimits",
+    "description": "Grants permission to call GetAccountLimits",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putaccountlimits": {
+    "name": "PutAccountLimits",
+    "description": "Grants permission to call PutAccountLimits",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "activatepipeline": {
     "name": "ActivatePipeline",
     "description": "Grants permission to validate the specified pipeline and starts processing pipeline tasks. If the pipeline does not pass validation, activation fails",
@@ -21,7 +37,7 @@
   "addtags": {
     "name": "AddTags",
     "description": "Grants permission to add or modify tags for the specified pipeline",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "pipeline",
@@ -31,10 +47,10 @@
       }
     ],
     "conditionKeys": [
-      "datapipeline:PipelineCreator",
-      "datapipeline:Tag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "datapipeline:PipelineCreator",
+      "datapipeline:Tag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -48,9 +64,7 @@
       "aws:TagKeys",
       "datapipeline:Tag/${TagKey}"
     ],
-    "dependentActions": [
-      "datapipeline:AddTags"
-    ]
+    "dependentActions": []
   },
   "deactivatepipeline": {
     "name": "DeactivatePipeline",
@@ -143,15 +157,6 @@
     ],
     "dependentActions": []
   },
-  "getaccountlimits": {
-    "name": "GetAccountLimits",
-    "isPermissionOnly": true,
-    "description": "Grants permission to call GetAccountLimits",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getpipelinedefinition": {
     "name": "GetPipelineDefinition",
     "description": "Grants permission to gets the definition of the specified pipeline",
@@ -189,15 +194,6 @@
     ],
     "dependentActions": []
   },
-  "putaccountlimits": {
-    "name": "PutAccountLimits",
-    "isPermissionOnly": true,
-    "description": "Grants permission to call PutAccountLimits",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putpipelinedefinition": {
     "name": "PutPipelineDefinition",
     "description": "Grants permission to add tasks, schedules, and preconditions to the specified pipeline",
@@ -238,7 +234,7 @@
   "removetags": {
     "name": "RemoveTags",
     "description": "Grants permission to remove existing tags from the specified pipeline",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "pipeline",
@@ -248,10 +244,10 @@
       }
     ],
     "conditionKeys": [
-      "datapipeline:PipelineCreator",
-      "datapipeline:Tag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "datapipeline:PipelineCreator",
+      "datapipeline:Tag/${TagKey}"
     ],
     "dependentActions": []
   },

package/data/actions/datasync.json

@@ -173,14 +173,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "location",
-        "required": true,
+        "name": "agent",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "agent",
-        "required": false,
+        "name": "location",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -685,7 +685,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to apply a key-value pair to an AWS resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "agent",
@@ -733,7 +733,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove one or more tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "agent",