@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/events.json

@@ -1,11 +1,11 @@
 {
-  "activateeventsource": {
-    "name": "ActivateEventSource",
-    "description": "Grants permission to activate partner event sources",
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "description": "Grants permission to configure vended log delivery for EventBridge",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "event-source",
+        "name": "event-bus",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -14,14 +14,43 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "allowvendedlogdeliveryforresource": {
-    "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
-    "description": "Grants permission to configure vended log delivery for EventBridge",
+  "invokeapidestination": {
+    "name": "InvokeApiDestination",
+    "description": "Grants permission to invoke an api destination",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "event-bus",
+        "name": "api-destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "retrieveconnectioncredentials": {
+    "name": "RetrieveConnectionCredentials",
+    "description": "Grants permission to retrieve credentials from a connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "activateeventsource": {
+    "name": "ActivateEventSource",
+    "description": "Grants permission to activate partner event sources",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "event-source",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -72,20 +101,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "archive",
-        "required": true,
+        "name": "alias",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "event-bus",
+        "name": "archive",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "alias",
-        "required": false,
+        "name": "event-bus",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -315,8 +344,8 @@
       }
     ],
     "conditionKeys": [
-      "events:creatorAccount",
-      "events:ManagedBy"
+      "events:ManagedBy",
+      "events:creatorAccount"
     ],
     "dependentActions": []
   },
@@ -494,8 +523,8 @@
       }
     ],
     "conditionKeys": [
-      "events:creatorAccount",
-      "events:ManagedBy"
+      "events:ManagedBy",
+      "events:creatorAccount"
     ],
     "dependentActions": []
   },
@@ -518,25 +547,9 @@
       }
     ],
     "conditionKeys": [
-      "events:creatorAccount",
-      "events:ManagedBy"
-    ],
-    "dependentActions": []
-  },
-  "invokeapidestination": {
-    "name": "InvokeApiDestination",
-    "isPermissionOnly": true,
-    "description": "Grants permission to invoke an api destination",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "api-destination",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
+      "events:ManagedBy",
+      "events:creatorAccount"
     ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "listapidestinations": {
@@ -723,11 +736,11 @@
       }
     ],
     "conditionKeys": [
+      "events:ResourceArn",
+      "events:SystemMetadata/EventGroupId",
       "events:detail-type",
-      "events:source",
       "events:eventBusInvocation",
-      "events:SystemMetadata/EventGroupId",
-      "events:ResourceArn"
+      "events:source"
     ],
     "dependentActions": []
   },
@@ -742,7 +755,7 @@
   "putpermission": {
     "name": "PutPermission",
     "description": "Grants permission to use the PutPermission action to grants permission to another AWS account to put events to your default event bus",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -766,15 +779,15 @@
       }
     ],
     "conditionKeys": [
-      "events:detail.userIdentity.principalId",
-      "events:detail-type",
-      "events:source",
-      "events:detail.service",
-      "events:detail.eventTypeCode",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "events:ManagedBy",
       "events:creatorAccount",
-      "events:ManagedBy"
+      "events:detail-type",
+      "events:detail.eventTypeCode",
+      "events:detail.service",
+      "events:detail.userIdentity.principalId",
+      "events:source"
     ],
     "dependentActions": []
   },
@@ -797,16 +810,16 @@
       }
     ],
     "conditionKeys": [
+      "events:ManagedBy",
       "events:TargetArn",
-      "events:creatorAccount",
-      "events:ManagedBy"
+      "events:creatorAccount"
     ],
     "dependentActions": []
   },
   "removepermission": {
     "name": "RemovePermission",
     "description": "Grants permission to revoke the permission of another AWS account to put events to your default event bus",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -830,25 +843,9 @@
       }
     ],
     "conditionKeys": [
-      "events:creatorAccount",
-      "events:ManagedBy"
-    ],
-    "dependentActions": []
-  },
-  "retrieveconnectioncredentials": {
-    "name": "RetrieveConnectionCredentials",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve credentials from a connection",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
+      "events:ManagedBy",
+      "events:creatorAccount"
     ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "startreplay": {
@@ -881,7 +878,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add a tag to an Amazon EventBridge resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "event-bus",
@@ -921,8 +918,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "events:creatorAccount"
     ],
     "dependentActions": []
@@ -938,7 +935,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from an Amazon EventBridge resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "event-bus",
@@ -1004,14 +1001,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "archive",
-        "required": true,
+        "name": "alias",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "alias",
-        "required": false,
+        "name": "archive",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },

package/data/actions/eventsbilltoaws.json

@@ -6,8 +6,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -18,8 +18,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   }

package/data/actions/evidently.json

@@ -7,7 +7,9 @@
       {
         "name": "Feature",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -56,10 +58,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:GetRole"
-    ]
+    "dependentActions": []
   },
   "createsegment": {
     "name": "CreateSegment",
@@ -80,7 +79,9 @@
       {
         "name": "Experiment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -95,7 +96,9 @@
       {
         "name": "Feature",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -110,7 +113,9 @@
       {
         "name": "Launch",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -125,7 +130,9 @@
       {
         "name": "Project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -140,7 +147,9 @@
       {
         "name": "Segment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -155,7 +164,9 @@
       {
         "name": "Feature",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -170,7 +181,9 @@
       {
         "name": "Experiment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -185,7 +198,9 @@
       {
         "name": "Experiment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -200,7 +215,9 @@
       {
         "name": "Feature",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -215,7 +232,9 @@
       {
         "name": "Launch",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -230,7 +249,9 @@
       {
         "name": "Project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -245,7 +266,9 @@
       {
         "name": "Segment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -316,7 +339,9 @@
       {
         "name": "Project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -331,7 +356,9 @@
       {
         "name": "Experiment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -346,7 +373,9 @@
       {
         "name": "Launch",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -361,7 +390,9 @@
       {
         "name": "Experiment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -376,7 +407,9 @@
       {
         "name": "Launch",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -386,43 +419,60 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Experiment",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Feature",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Launch",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Project",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Segment",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "testsegmentpattern": {
@@ -436,42 +486,55 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Experiment",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Feature",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Launch",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Project",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "Segment",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updateexperiment": {
@@ -482,7 +545,9 @@
       {
         "name": "Experiment",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -497,7 +562,9 @@
       {
         "name": "Feature",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -512,7 +579,9 @@
       {
         "name": "Launch",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -527,15 +596,14 @@
       {
         "name": "Project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:GetRole"
-    ]
+    "dependentActions": []
   },
   "updateprojectdatadelivery": {
     "name": "UpdateProjectDataDelivery",
@@ -545,7 +613,9 @@
       {
         "name": "Project",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],