@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/appconfig.json

@@ -693,7 +693,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an appconfig resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -745,16 +745,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag an appconfig resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",

package/data/actions/appfabric.json

@@ -434,7 +434,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag AppFabric resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "appauthorization",
@@ -462,16 +462,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag AppFabric resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "appauthorization",

package/data/actions/appflow.json

@@ -1,4 +1,87 @@
 {
+  "describeconnectorfields": {
+    "name": "DescribeConnectorFields",
+    "description": "Grants permission to describe all fields for an object in a login profile configured in Amazon AppFlow (Console Only)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectorprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeflowexecution": {
+    "name": "DescribeFlowExecution",
+    "description": "Grants permission to describe all flow executions for a flow configured in Amazon AppFlow (Console Only)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeflows": {
+    "name": "DescribeFlows",
+    "description": "Grants permission to describe all flows configured in Amazon AppFlow (Console Only)",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listconnectorfields": {
+    "name": "ListConnectorFields",
+    "description": "Grants permission to list all objects for a login profile configured in Amazon AppFlow (Console Only)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "connectorprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "runflow": {
+    "name": "RunFlow",
+    "description": "Grants permission to run a flow configured in Amazon AppFlow (Console Only)",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "useconnectorprofile": {
+    "name": "UseConnectorProfile",
+    "description": "Grants permission to use a connector profile while creating a flow in Amazon AppFlow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connectorprofile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "cancelflowexecutions": {
     "name": "CancelFlowExecutions",
     "description": "Grants permission to cancel in-progress executions of an Amazon AppFlow flow",
@@ -96,22 +179,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeconnectorfields": {
-    "name": "DescribeConnectorFields",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe all fields for an object in a login profile configured in Amazon AppFlow (Console Only)",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "connectorprofile",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeconnectorprofiles": {
     "name": "DescribeConnectorProfiles",
     "description": "Grants permission to describe all login profiles configured in Amazon AppFlow",
@@ -143,22 +210,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeflowexecution": {
-    "name": "DescribeFlowExecution",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe all flow executions for a flow configured in Amazon AppFlow (Console Only)",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "flow",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeflowexecutionrecords": {
     "name": "DescribeFlowExecutionRecords",
     "description": "Grants permission to describe all flow executions for a flow configured in Amazon AppFlow",
@@ -174,15 +225,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeflows": {
-    "name": "DescribeFlows",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe all flows configured in Amazon AppFlow (Console Only)",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listconnectorentities": {
     "name": "ListConnectorEntities",
     "description": "Grants permission to list all objects for a login profile configured in Amazon AppFlow",
@@ -198,22 +240,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listconnectorfields": {
-    "name": "ListConnectorFields",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all objects for a login profile configured in Amazon AppFlow (Console Only)",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "connectorprofile",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listconnectors": {
     "name": "ListConnectors",
     "description": "Grants permission to list all connectors supported in Amazon AppFlow",
@@ -285,22 +311,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "runflow": {
-    "name": "RunFlow",
-    "isPermissionOnly": true,
-    "description": "Grants permission to run a flow configured in Amazon AppFlow (Console Only)",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "flow",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startflow": {
     "name": "StartFlow",
     "description": "Grants permission to activate (for scheduled and event-triggered flows) or run (for on-demand flows) a flow configured in Amazon AppFlow",
@@ -334,7 +344,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a flow or a connector",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "connector",
@@ -350,8 +360,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -376,7 +386,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a flow or a connector",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "connector",
@@ -440,21 +450,5 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
-  },
-  "useconnectorprofile": {
-    "name": "UseConnectorProfile",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a connector profile while creating a flow in Amazon AppFlow",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "connectorprofile",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }

package/data/actions/application-autoscaling.json

@@ -12,8 +12,8 @@
       }
     ],
     "conditionKeys": [
-      "application-autoscaling:service-namespace",
-      "application-autoscaling:scalable-dimension"
+      "application-autoscaling:scalable-dimension",
+      "application-autoscaling:service-namespace"
     ],
     "dependentActions": []
   },
@@ -30,8 +30,8 @@
       }
     ],
     "conditionKeys": [
-      "application-autoscaling:service-namespace",
-      "application-autoscaling:scalable-dimension"
+      "application-autoscaling:scalable-dimension",
+      "application-autoscaling:service-namespace"
     ],
     "dependentActions": []
   },
@@ -48,8 +48,8 @@
       }
     ],
     "conditionKeys": [
-      "application-autoscaling:service-namespace",
-      "application-autoscaling:scalable-dimension"
+      "application-autoscaling:scalable-dimension",
+      "application-autoscaling:service-namespace"
     ],
     "dependentActions": []
   },
@@ -121,8 +121,8 @@
       }
     ],
     "conditionKeys": [
-      "application-autoscaling:service-namespace",
-      "application-autoscaling:scalable-dimension"
+      "application-autoscaling:scalable-dimension",
+      "application-autoscaling:service-namespace"
     ],
     "dependentActions": []
   },
@@ -139,8 +139,8 @@
       }
     ],
     "conditionKeys": [
-      "application-autoscaling:service-namespace",
-      "application-autoscaling:scalable-dimension"
+      "application-autoscaling:scalable-dimension",
+      "application-autoscaling:service-namespace"
     ],
     "dependentActions": []
   },
@@ -153,23 +153,21 @@
         "name": "ScalableTarget",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "application-autoscaling:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
+      "application-autoscaling:scalable-dimension",
       "application-autoscaling:service-namespace",
-      "application-autoscaling:scalable-dimension"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a scalable target",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ScalableTarget",
@@ -187,7 +185,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a scalable target",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ScalableTarget",

package/data/actions/application-signals-mcp.json

@@ -7,7 +7,9 @@
       {
         "name": "mcp-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -22,7 +24,9 @@
       {
         "name": "mcp-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],

package/data/actions/application-signals.json

@@ -1,4 +1,12 @@
 {
+  "link": {
+    "name": "Link",
+    "description": "Grants permission to share Application Signals resources with a monitoring account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchdeleteinstrumentationconfigurations": {
     "name": "BatchDeleteInstrumentationConfigurations",
     "description": "Grants permission to batch delete instrumentation configurations",
@@ -157,15 +165,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "link": {
-    "name": "Link",
-    "isPermissionOnly": true,
-    "description": "Grants permission to share Application Signals resources with a monitoring account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listauditfindings": {
     "name": "ListAuditFindings",
     "description": "Grants permission to list service auditing results",
@@ -324,7 +323,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an Amazon CloudWatch Application Signals resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "instrumentationConfig",
@@ -348,7 +347,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an Amazon CloudWatch Application Signals resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "instrumentationConfig",

package/data/actions/applicationinsights.json

@@ -1,4 +1,12 @@
 {
+  "link": {
+    "name": "Link",
+    "description": "Grants permission to share Application Insights resources with a monitoring account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addworkload": {
     "name": "AddWorkload",
     "description": "Grants permission to add a workload",
@@ -127,15 +135,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "link": {
-    "name": "Link",
-    "isPermissionOnly": true,
-    "description": "Grants permission to share Application Insights resources with a monitoring account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listapplications": {
     "name": "ListApplications",
     "description": "Grants permission to list all applications",
@@ -211,7 +210,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
@@ -222,7 +221,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys"

package/data/actions/appmesh-preview.json

@@ -1,4 +1,49 @@
 {
+  "deletemeshpolicy": {
+    "name": "DeleteMeshPolicy",
+    "description": "Grants permission to delete the RAM access control policy for a mesh",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mesh",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmeshpolicy": {
+    "name": "GetMeshPolicy",
+    "description": "Grants permission to read the RAM access control policy for a mesh",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mesh",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putmeshpolicy": {
+    "name": "PutMeshPolicy",
+    "description": "Grants permission to define the RAM access control policy for a mesh",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mesh",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "creategatewayroute": {
     "name": "CreateGatewayRoute",
     "description": "Grants permission to create a gateway route that is associated with a virtual gateway",
@@ -113,20 +158,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "virtualService",
-        "required": true,
+        "name": "virtualNode",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "virtualNode",
+        "name": "virtualRouter",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "virtualRouter",
-        "required": false,
+        "name": "virtualService",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -164,22 +209,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletemeshpolicy": {
-    "name": "DeleteMeshPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete the RAM access control policy for a mesh",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "mesh",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteroute": {
     "name": "DeleteRoute",
     "description": "Grants permission to delete an existing route",
@@ -360,22 +389,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmeshpolicy": {
-    "name": "GetMeshPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the RAM access control policy for a mesh",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "mesh",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listgatewayroutes": {
     "name": "ListGatewayRoutes",
     "description": "Grants permission to list existing gateway routes in a service mesh",
@@ -474,22 +487,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putmeshpolicy": {
-    "name": "PutMeshPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to define the RAM access control policy for a mesh",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "mesh",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "streamaggregatedresources": {
     "name": "StreamAggregatedResources",
     "description": "Grants permission to receive streamed resources for an App Mesh endpoint (VirtualNode/VirtualGateway)",
@@ -619,20 +616,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "virtualService",
-        "required": true,
+        "name": "virtualNode",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "virtualNode",
+        "name": "virtualRouter",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "virtualRouter",
-        "required": false,
+        "name": "virtualService",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }