@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/elemental-activations.json

@@ -1,7 +1,6 @@
 {
   "completeaccountregistration": {
     "name": "CompleteAccountRegistration",
-    "isPermissionOnly": true,
     "description": "Grants permission to complete the process of registering customer account for AWS Elemental Appliances and Software Purchases",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "completefileupload": {
     "name": "CompleteFileUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to complete the process of uploading a Software file for AWS Elemental Appliances and Software Purchases",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "confirmaccount": {
     "name": "ConfirmAccount",
-    "isPermissionOnly": true,
     "description": "Grants permission to confirm asset ownership",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "downloadkickstart": {
     "name": "DownloadKickstart",
-    "isPermissionOnly": true,
     "description": "Grants permission to download the kickstart files for AWS Elemental Appliances and Software purchases",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "downloadsoftware": {
     "name": "DownloadSoftware",
-    "isPermissionOnly": true,
     "description": "Grants permission to download the Software files for AWS Elemental Appliances and Software Purchases",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -46,7 +41,6 @@
   },
   "generatelicense": {
     "name": "GenerateLicense",
-    "isPermissionOnly": true,
     "description": "Grants permission to generate a software license for an AWS Elemental Appliances and Software purchase",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -55,7 +49,6 @@
   },
   "generatelicenses": {
     "name": "GenerateLicenses",
-    "isPermissionOnly": true,
     "description": "Grants permission to generate Software Licenses for AWS Elemental Appliances and Software Purchases",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -64,7 +57,6 @@
   },
   "getartifactgroupsoftwareversions": {
     "name": "GetArtifactGroupSoftwareVersions",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe the software version of an artifact group",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -73,7 +65,6 @@
   },
   "getasset": {
     "name": "GetAsset",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe an asset",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -82,7 +73,6 @@
   },
   "getassets": {
     "name": "GetAssets",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe assets associated to the requesting account",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -91,7 +81,6 @@
   },
   "getproductadvisories": {
     "name": "GetProductAdvisories",
-    "isPermissionOnly": true,
     "description": "Grants permission to get all product advisories",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -100,7 +89,6 @@
   },
   "getsoftwareversions": {
     "name": "GetSoftwareVersions",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe available software versions",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -109,7 +97,6 @@
   },
   "startfileupload": {
     "name": "StartFileUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to start the process of uploading a Software file for AWS Elemental Appliances and Software Purchases",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/elemental-appliances-software.json

@@ -1,7 +1,6 @@
 {
   "completeupload": {
     "name": "CompleteUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to complete an upload of an attachment for a quote or order",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "createorderv1": {
     "name": "CreateOrderV1",
-    "isPermissionOnly": true,
     "description": "Grants permission to create an order",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "createquote": {
     "name": "CreateQuote",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a quote",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -35,7 +32,6 @@
   },
   "getavscorrectaddress": {
     "name": "GetAvsCorrectAddress",
-    "isPermissionOnly": true,
     "description": "Grants permission to validate an address",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -44,7 +40,6 @@
   },
   "getbillingaddresses": {
     "name": "GetBillingAddresses",
-    "isPermissionOnly": true,
     "description": "Grants permission to list the billing addresses in the AWS Account",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -53,7 +48,6 @@
   },
   "getdeliveryaddressesv2": {
     "name": "GetDeliveryAddressesV2",
-    "isPermissionOnly": true,
     "description": "Grants permission to list the delivery addresses in the AWS Account",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -62,7 +56,6 @@
   },
   "getorder": {
     "name": "GetOrder",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe an order",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -71,7 +64,6 @@
   },
   "getordersv2": {
     "name": "GetOrdersV2",
-    "isPermissionOnly": true,
     "description": "Grants permission to list the orders in the AWS Account",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -80,7 +72,6 @@
   },
   "getquote": {
     "name": "GetQuote",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe a quote",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -96,7 +87,6 @@
   },
   "gettaxes": {
     "name": "GetTaxes",
-    "isPermissionOnly": true,
     "description": "Grants permission to calculate taxes for an order",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -105,7 +95,6 @@
   },
   "listquotes": {
     "name": "ListQuotes",
-    "isPermissionOnly": true,
     "description": "Grants permission to list the quotes in the AWS Account",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -114,7 +103,6 @@
   },
   "startupload": {
     "name": "StartUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to start an upload of an attachment for a quote or order",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -123,7 +111,6 @@
   },
   "submitorderv1": {
     "name": "SubmitOrderV1",
-    "isPermissionOnly": true,
     "description": "Grants permission to submit an order",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -132,7 +119,6 @@
   },
   "updatequote": {
     "name": "UpdateQuote",
-    "isPermissionOnly": true,
     "description": "Grants permission to modify a quote",
     "accessLevel": "Write",
     "resourceTypes": [

package/data/actions/elemental-inference.json

@@ -183,7 +183,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "dictionary",
@@ -207,7 +207,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "dictionary",

package/data/actions/elemental-support-cases.json

@@ -1,14 +1,15 @@
 {
   "addcasecomment": {
     "name": "AddCaseComment",
-    "isPermissionOnly": true,
     "description": "Grants permission to add a comment to a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -17,7 +18,6 @@
   },
   "checkcasepermission": {
     "name": "CheckCasePermission",
-    "isPermissionOnly": true,
     "description": "Grants permission to verify whether the caller has the permissions to perform support case operations",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -26,14 +26,15 @@
   },
   "completemultipartupload": {
     "name": "CompleteMultipartUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to complete a multipart file upload to a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -42,26 +43,26 @@
   },
   "createcase": {
     "name": "CreateCase",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a support case",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "creates3cliuploadcommand": {
     "name": "CreateS3CLIUploadCommand",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a cli command to allow a file upload to a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -70,14 +71,15 @@
   },
   "creates3downloadurl": {
     "name": "CreateS3DownloadUrl",
-    "isPermissionOnly": true,
     "description": "Grants permission to download a file from a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -86,14 +88,15 @@
   },
   "getcase": {
     "name": "GetCase",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe a support case in your account",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -102,7 +105,6 @@
   },
   "getcasepermission": {
     "name": "GetCasePermission",
-    "isPermissionOnly": true,
     "description": "Grants permission to verify whether the caller has the permissions to perform support case operations",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -111,7 +113,6 @@
   },
   "getcases": {
     "name": "GetCases",
-    "isPermissionOnly": true,
     "description": "Grants permission to list the support cases in your account",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -120,7 +121,6 @@
   },
   "getuicache": {
     "name": "GetUICache",
-    "isPermissionOnly": true,
     "description": "Grants permission to retrieve cached case user data for use in the Console",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -129,14 +129,15 @@
   },
   "listtagsforcase": {
     "name": "ListTagsForCase",
-    "isPermissionOnly": true,
     "description": "Grants permission to list tags on a support case",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -145,14 +146,15 @@
   },
   "startmultipartupload": {
     "name": "StartMultipartUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to start a multipart file upload to a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -161,51 +163,52 @@
   },
   "tagcase": {
     "name": "TagCase",
-    "isPermissionOnly": true,
     "description": "Grants permission to add a tag on a support case",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "untagcase": {
     "name": "UntagCase",
-    "isPermissionOnly": true,
     "description": "Grants permission to remove a tag on a support case",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updatecase": {
     "name": "UpdateCase",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -214,14 +217,15 @@
   },
   "updatecasestatus": {
     "name": "UpdateCaseStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a support case status",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -230,14 +234,15 @@
   },
   "updatemultipartupload": {
     "name": "UpdateMultipartUpload",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a multipart file upload to a support case",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "case",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],

package/data/actions/elemental-support-content.json

@@ -1,7 +1,6 @@
 {
   "query": {
     "name": "Query",
-    "isPermissionOnly": true,
     "description": "Grants permission to search support content",
     "accessLevel": "Read",
     "resourceTypes": [],

package/data/actions/emr-containers.json

@@ -340,7 +340,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "jobRun",
@@ -382,7 +382,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "jobRun",

package/data/actions/emr-serverless.json

@@ -1,7 +1,6 @@
 {
   "accessinteractiveendpoints": {
     "name": "AccessInteractiveEndpoints",
-    "isPermissionOnly": true,
     "description": "Grants permission to execute interactive workloads on an application",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -13,13 +12,10 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "accesslivyendpoints": {
     "name": "AccessLivyEndpoints",
-    "isPermissionOnly": true,
     "description": "Grants permission to execute interactive workloads on Livy Endpoint enabled on an EMR Serverless Application",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -31,13 +27,10 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "accesssystemprofilelogs": {
     "name": "AccessSystemProfileLogs",
-    "isPermissionOnly": true,
     "description": "Grants permission to access system profile logs",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -286,9 +279,7 @@
         "name": "application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -306,9 +297,7 @@
         "name": "application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -335,7 +324,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -380,7 +369,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",

package/data/actions/entityresolution.json

@@ -2,7 +2,7 @@
   "addpolicystatement": {
     "name": "AddPolicyStatement",
     "description": "Grants permission to give an AWS service or another account permission to use an AWS Entity Resolution resources",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -114,7 +114,7 @@
   "deletepolicystatement": {
     "name": "DeletePolicyStatement",
     "description": "Grants permission to delete permission given to an AWS service or another account permission to use an AWS Entity Resolution resources",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -358,7 +358,7 @@
   "putpolicy": {
     "name": "PutPolicy",
     "description": "Grants permission to put a resource policy for an AWS Entity Resolution resources",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -396,7 +396,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to adds tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "IdMappingWorkflow",
@@ -438,7 +438,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "IdMappingWorkflow",
@@ -539,7 +539,7 @@
   "useidnamespace": {
     "name": "UseIdNamespace",
     "description": "Grants permission to give an AWS service or another account permission to use IdNamespace within a workflow",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -547,7 +547,7 @@
   "useworkflow": {
     "name": "UseWorkflow",
     "description": "Grants permission to give an AWS service or another account permission to use workflow within a IdNamespace",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []

package/data/actions/es.json

@@ -51,7 +51,7 @@
   "addtags": {
     "name": "AddTags",
     "description": "Grants permission to attach resource tags to an OpenSearch Service domain, data source, or application",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -1382,7 +1382,7 @@
   "removetags": {
     "name": "RemoveTags",
     "description": "Grants permission to remove resource tags from an OpenSearch Service domain, data source, or application",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",