@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/dms.json

@@ -1,8 +1,68 @@
 {
+  "createoutboundintegration": {
+    "name": "CreateOutboundIntegration",
+    "description": "Grants permission to DMS to create resources for zero-ETL integrations with self managed databases",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "dms:req-tag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listmetadatamodelassessmentactionitems": {
+    "name": "ListMetadataModelAssessmentActionItems",
+    "description": "Grants permission to list the AWS DMS attributes for a metadata model assessment action items. Note. Despite this action requires StartMetadataModelImport, the latter does not currently authorize the described Schema Conversion operation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "MigrationProject",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyfleetadvisorcollector": {
+    "name": "ModifyFleetAdvisorCollector",
+    "description": "Grants permission to modify the name and description of the specified Fleet Advisor collector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyfleetadvisorcollectorstatuses": {
+    "name": "ModifyFleetAdvisorCollectorStatuses",
+    "description": "Grants permission to modify the status of the specified Fleet Advisor collector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "modifyoutboundintegration": {
+    "name": "ModifyOutboundIntegration",
+    "description": "Grants permission to DMS to modify resources for zero-ETL integrations with self managed databases",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "uploadfilemetadatalist": {
+    "name": "UploadFileMetadataList",
+    "description": "Grants permission to upload files to your Amazon S3 bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addtagstoresource": {
     "name": "AddTagsToResource",
     "description": "Grants permission to add metadata tags to DMS resources, including replication instances, endpoints, security groups, and migration tasks",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Certificate",
@@ -84,8 +144,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
@@ -183,14 +243,12 @@
         "name": "MigrationProject",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
@@ -202,14 +260,12 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createendpoint": {
     "name": "CreateEndpoint",
@@ -217,14 +273,12 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createeventsubscription": {
     "name": "CreateEventSubscription",
@@ -232,8 +286,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
@@ -245,9 +299,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createinstanceprofile": {
     "name": "CreateInstanceProfile",
@@ -255,14 +307,12 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createmigrationproject": {
     "name": "CreateMigrationProject",
@@ -273,9 +323,7 @@
         "name": "DataProvider",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "InstanceProfile",
@@ -285,28 +333,12 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "dms:req-tag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "createoutboundintegration": {
-    "name": "CreateOutboundIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to DMS to create resources for zero-ETL integrations with self managed databases",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createreplicationconfig": {
     "name": "CreateReplicationConfig",
@@ -321,8 +353,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
@@ -334,14 +366,12 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createreplicationsubnetgroup": {
     "name": "CreateReplicationSubnetGroup",
@@ -349,8 +379,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
@@ -375,8 +405,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
       "dms:req-tag/${TagKey}"
     ],
@@ -1072,8 +1102,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -1116,24 +1146,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listmetadatamodelassessmentactionitems": {
-    "name": "ListMetadataModelAssessmentActionItems",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list the AWS DMS attributes for a metadata model assessment action items. Note. Despite this action requires StartMetadataModelImport, the latter does not currently authorize the described Schema Conversion operation",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "MigrationProject",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "dms:StartMetadataModelImport"
-    ]
-  },
   "listmetadatamodelassessments": {
     "name": "ListMetadataModelAssessments",
     "description": "Grants permission to list the AWS DMS attributes for a metadata model assessments",
@@ -1188,9 +1200,7 @@
         "name": "DataProvider",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "dms:DescribeConversionConfiguration"
-        ]
+        "dependentActions": []
       },
       {
         "name": "InstanceProfile",
@@ -1308,9 +1318,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "modifyendpoint": {
     "name": "ModifyEndpoint",
@@ -1318,16 +1326,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "Endpoint",
-        "required": true,
+        "name": "Certificate",
+        "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
-        "name": "Certificate",
-        "required": false,
+        "name": "Endpoint",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1343,35 +1349,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "modifyfleetadvisorcollector": {
-    "name": "ModifyFleetAdvisorCollector",
-    "isPermissionOnly": true,
-    "description": "Grants permission to modify the name and description of the specified Fleet Advisor collector",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "modifyfleetadvisorcollectorstatuses": {
-    "name": "ModifyFleetAdvisorCollectorStatuses",
-    "isPermissionOnly": true,
-    "description": "Grants permission to modify the status of the specified Fleet Advisor collector",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "modifyoutboundintegration": {
-    "name": "ModifyOutboundIntegration",
-    "isPermissionOnly": true,
-    "description": "Grants permission to DMS to modify resources for zero-ETL integrations with self managed databases",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
-  },
   "modifyreplicationconfig": {
     "name": "ModifyReplicationConfig",
     "description": "Grants permission to modify the specified replication config",
@@ -1515,7 +1492,7 @@
   "removetagsfromresource": {
     "name": "RemoveTagsFromResource",
     "description": "Grants permission to remove metadata tags from a DMS resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Certificate",
@@ -1597,8 +1574,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -1782,9 +1759,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "stopdatamigration": {
     "name": "StopDataMigration",
@@ -1919,14 +1894,5 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
-  },
-  "uploadfilemetadatalist": {
-    "name": "UploadFileMetadataList",
-    "isPermissionOnly": true,
-    "description": "Grants permission to upload files to your Amazon S3 bucket",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }

package/data/actions/docdb-elastic.json

@@ -25,19 +25,13 @@
         "name": "cluster-snapshot",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "docdb-elastic:CreateClusterSnapshot",
-          "kms:CreateGrant",
-          "kms:Decrypt",
-          "kms:DescribeKey",
-          "kms:GenerateDataKey"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -50,27 +44,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "ec2:CreateVpcEndpoint",
-      "ec2:DeleteVpcEndpoints",
-      "ec2:DescribeAvailabilityZones",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcAttribute",
-      "ec2:DescribeVpcEndpoints",
-      "ec2:DescribeVpcs",
-      "ec2:ModifyVpcEndpoint",
-      "iam:CreateServiceLinkedRole",
-      "kms:CreateGrant",
-      "kms:Decrypt",
-      "kms:DescribeKey",
-      "kms:GenerateDataKey",
-      "secretsmanager:DescribeSecret",
-      "secretsmanager:GetResourcePolicy",
-      "secretsmanager:GetSecretValue",
-      "secretsmanager:ListSecretVersionIds",
-      "secretsmanager:ListSecrets"
-    ]
+    "dependentActions": []
   },
   "createclustersnapshot": {
     "name": "CreateClusterSnapshot",
@@ -81,27 +55,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateVpcEndpoint",
-          "ec2:DeleteVpcEndpoints",
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "ec2:ModifyVpcEndpoint",
-          "iam:CreateServiceLinkedRole",
-          "kms:CreateGrant",
-          "kms:Decrypt",
-          "kms:DescribeKey",
-          "kms:GenerateDataKey",
-          "secretsmanager:DescribeSecret",
-          "secretsmanager:GetResourcePolicy",
-          "secretsmanager:GetSecretValue",
-          "secretsmanager:ListSecretVersionIds",
-          "secretsmanager:ListSecrets"
-        ]
+        "dependentActions": []
       },
       {
         "name": "cluster-snapshot",
@@ -112,8 +66,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -126,16 +80,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DeleteVpcEndpoints",
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "ec2:ModifyVpcEndpoint"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -152,16 +97,7 @@
         "name": "cluster-snapshot",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DeleteVpcEndpoints",
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "ec2:ModifyVpcEndpoint"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -278,28 +214,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "docdb-elastic:CreateCluster",
-          "ec2:CreateVpcEndpoint",
-          "ec2:DeleteVpcEndpoints",
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "ec2:ModifyVpcEndpoint",
-          "iam:CreateServiceLinkedRole",
-          "kms:CreateGrant",
-          "kms:Decrypt",
-          "kms:DescribeKey",
-          "kms:GenerateDataKey",
-          "secretsmanager:DescribeSecret",
-          "secretsmanager:GetResourcePolicy",
-          "secretsmanager:GetSecretValue",
-          "secretsmanager:ListSecretVersionIds",
-          "secretsmanager:ListSecrets"
-        ]
+        "dependentActions": []
       },
       {
         "name": "cluster-snapshot",
@@ -310,8 +225,8 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -352,7 +267,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an DocumentDB Elastic resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -368,16 +283,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a DocumentDB Elastic resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -406,26 +321,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateVpcEndpoint",
-          "ec2:DeleteVpcEndpoints",
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcAttribute",
-          "ec2:DescribeVpcEndpoints",
-          "ec2:DescribeVpcs",
-          "ec2:ModifyVpcEndpoint",
-          "kms:CreateGrant",
-          "kms:Decrypt",
-          "kms:DescribeKey",
-          "kms:GenerateDataKey",
-          "secretsmanager:DescribeSecret",
-          "secretsmanager:GetResourcePolicy",
-          "secretsmanager:GetSecretValue",
-          "secretsmanager:ListSecretVersionIds",
-          "secretsmanager:ListSecrets"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [