@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/appmesh.json

@@ -1,4 +1,49 @@
 {
+  "deletemeshpolicy": {
+    "name": "DeleteMeshPolicy",
+    "description": "Grants permission to delete the RAM access control policy for a mesh",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mesh",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmeshpolicy": {
+    "name": "GetMeshPolicy",
+    "description": "Grants permission to read the RAM access control policy for a mesh",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mesh",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putmeshpolicy": {
+    "name": "PutMeshPolicy",
+    "description": "Grants permission to define the RAM access control policy for a mesh",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mesh",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "creategatewayroute": {
     "name": "CreateGatewayRoute",
     "description": "Grants permission to create a gateway route that is associated with a virtual gateway",
@@ -8,8 +53,8 @@
         "name": "gatewayRoute",
         "required": true,
         "conditionKeys": [
-          "aws:TagKeys",
-          "aws:RequestTag/${TagKey}"
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": []
       },
@@ -36,8 +81,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -50,8 +95,8 @@
         "name": "route",
         "required": true,
         "conditionKeys": [
-          "aws:TagKeys",
-          "aws:RequestTag/${TagKey}"
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": []
       },
@@ -78,8 +123,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -92,8 +137,8 @@
         "name": "virtualNode",
         "required": true,
         "conditionKeys": [
-          "aws:TagKeys",
-          "aws:RequestTag/${TagKey}"
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
         ],
         "dependentActions": []
       },
@@ -120,8 +165,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -130,15 +175,6 @@
     "description": "Grants permission to create a virtual service within a service mesh",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "virtualService",
-        "required": true,
-        "conditionKeys": [
-          "aws:TagKeys",
-          "aws:RequestTag/${TagKey}"
-        ],
-        "dependentActions": []
-      },
       {
         "name": "virtualNode",
         "required": false,
@@ -150,6 +186,15 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "virtualService",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -185,22 +230,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletemeshpolicy": {
-    "name": "DeleteMeshPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete the RAM access control policy for a mesh",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "mesh",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteroute": {
     "name": "DeleteRoute",
     "description": "Grants permission to delete an existing route",
@@ -381,22 +410,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getmeshpolicy": {
-    "name": "GetMeshPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the RAM access control policy for a mesh",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "mesh",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listgatewayroutes": {
     "name": "ListGatewayRoutes",
     "description": "Grants permission to list existing gateway routes in a service mesh",
@@ -546,22 +559,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putmeshpolicy": {
-    "name": "PutMeshPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to define the RAM access control policy for a mesh",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "mesh",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "streamaggregatedresources": {
     "name": "StreamAggregatedResources",
     "description": "Grants permission to receive streamed resources for an App Mesh endpoint (VirtualNode/VirtualGateway)",
@@ -586,7 +583,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource with a specified resourceArn",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "gatewayRoute",
@@ -632,15 +629,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to delete a tag from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "gatewayRoute",
@@ -798,20 +795,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "virtualService",
-        "required": true,
+        "name": "virtualNode",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "virtualNode",
+        "name": "virtualRouter",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "virtualRouter",
-        "required": false,
+        "name": "virtualService",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/apprunner.json

@@ -1,7 +1,7 @@
 {
-  "associatecustomdomain": {
-    "name": "AssociateCustomDomain",
-    "description": "Grants permission to associate your own domain name with the AWS App Runner subdomain URL of your App Runner service",
+  "associatewebacl": {
+    "name": "AssociateWebAcl",
+    "description": "Grants permission to associate the service with an AWS WAF web ACL",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -9,15 +9,35 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "webacl",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "associatewebacl": {
-    "name": "AssociateWebAcl",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate the service with an AWS WAF web ACL",
+  "describewebaclforservice": {
+    "name": "DescribeWebAclForService",
+    "description": "Grants permission to get the AWS WAF web ACL that is associated with an AWS App Runner service",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disassociatewebacl": {
+    "name": "DisassociateWebAcl",
+    "description": "Grants permission to disassociate the service with an AWS WAF web ACL",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -25,7 +45,16 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listassociatedservicesforwebacl": {
+    "name": "ListAssociatedServicesForWebAcl",
+    "description": "Grants permission to list the services that are associated with an AWS WAF web ACL",
+    "accessLevel": "List",
+    "resourceTypes": [
       {
         "name": "webacl",
         "required": true,
@@ -36,6 +65,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatecustomdomain": {
+    "name": "AssociateCustomDomain",
+    "description": "Grants permission to associate your own domain name with the AWS App Runner subdomain URL of your App Runner service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createautoscalingconfiguration": {
     "name": "CreateAutoScalingConfiguration",
     "description": "Grants permission to create an AWS App Runner automatic scaling configuration resource",
@@ -95,12 +139,6 @@
     "description": "Grants permission to create an AWS App Runner service resource",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "service",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "autoscalingconfiguration",
         "required": false,
@@ -119,6 +157,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcconnector",
         "required": false,
@@ -127,12 +171,12 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "apprunner:ConnectionArn",
       "apprunner:AutoScalingConfigurationArn",
+      "apprunner:ConnectionArn",
       "apprunner:ObservabilityConfigurationArn",
-      "apprunner:VpcConnectorArn"
+      "apprunner:VpcConnectorArn",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -167,11 +211,11 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
       "apprunner:ServiceArn",
+      "apprunner:VpcEndpointId",
       "apprunner:VpcId",
-      "apprunner:VpcEndpointId"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -370,22 +414,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describewebaclforservice": {
-    "name": "DescribeWebAclForService",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the AWS WAF web ACL that is associated with an AWS App Runner service",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "service",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "disassociatecustomdomain": {
     "name": "DisassociateCustomDomain",
     "description": "Grants permission to disassociate a custom domain name from an AWS App Runner service",
@@ -401,38 +429,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "disassociatewebacl": {
-    "name": "DisassociateWebAcl",
-    "isPermissionOnly": true,
-    "description": "Grants permission to disassociate the service with an AWS WAF web ACL",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "service",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listassociatedservicesforwebacl": {
-    "name": "ListAssociatedServicesForWebAcl",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list the services that are associated with an AWS WAF web ACL",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "webacl",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listautoscalingconfigurations": {
     "name": "ListAutoScalingConfigurations",
     "description": "Grants permission to retrieve a list of AWS App Runner automatic scaling configurations in your AWS account",
@@ -598,7 +594,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to, or update tag values of, an AWS App Runner resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "autoscalingconfiguration",
@@ -638,15 +634,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an AWS App Runner resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "autoscalingconfiguration",
@@ -710,12 +706,6 @@
     "description": "Grants permission to update an AWS App Runner service resource",
     "accessLevel": "Write",
     "resourceTypes": [
-      {
-        "name": "service",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "autoscalingconfiguration",
         "required": false,
@@ -734,6 +724,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vpcconnector",
         "required": false,
@@ -742,8 +738,8 @@
       }
     ],
     "conditionKeys": [
-      "apprunner:ConnectionArn",
       "apprunner:AutoScalingConfigurationArn",
+      "apprunner:ConnectionArn",
       "apprunner:ObservabilityConfigurationArn",
       "apprunner:VpcConnectorArn"
     ],
@@ -762,8 +758,8 @@
       }
     ],
     "conditionKeys": [
-      "apprunner:VpcId",
-      "apprunner:VpcEndpointId"
+      "apprunner:VpcEndpointId",
+      "apprunner:VpcId"
     ],
     "dependentActions": []
   }

package/data/actions/appstream.json

@@ -1139,7 +1139,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or overwrite one or more tags for the specified AppStream 2.0 resource. The following resources can be tagged: Image builders, images, fleets, stacks, app blocks and applications",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "app-block",
@@ -1186,15 +1186,15 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to disassociate one or more tags from the specified AppStream 2.0 resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "app-block",
@@ -1267,14 +1267,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "application",
-        "required": true,
+        "name": "app-block",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "app-block",
-        "required": false,
+        "name": "application",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/appstudio.json

@@ -1,7 +1,6 @@
 {
   "getaccountstatus": {
     "name": "GetAccountStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe the account's current status",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "getenablementjobstatus": {
     "name": "GetEnablementJobStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to fetch status of a enablement job",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "startenablementjob": {
     "name": "StartEnablementJob",
-    "isPermissionOnly": true,
     "description": "Grants permission to submit a enablement job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "startrollbackenablementjob": {
     "name": "StartRollbackEnablementJob",
-    "isPermissionOnly": true,
     "description": "Grants permission to rollback an enablement job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "startteamdeployment": {
     "name": "StartTeamDeployment",
-    "isPermissionOnly": true,
     "description": "Grants permission to start a team deployment",
     "accessLevel": "Write",
     "resourceTypes": [],