@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/imagebuilder.json

@@ -38,14 +38,7 @@
         "name": "component",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "imagebuilder:TagResource",
-          "kms:Encrypt",
-          "kms:GenerateDataKey",
-          "kms:GenerateDataKeyWithoutPlaintext",
-          "s3:GetObject",
-          "s3:ListBucket"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -63,20 +56,7 @@
         "name": "containerRecipe",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeImages",
-          "ecr:DescribeImages",
-          "ecr:DescribeRepositories",
-          "imagebuilder:GetComponent",
-          "imagebuilder:GetImage",
-          "imagebuilder:TagResource",
-          "kms:Encrypt",
-          "kms:GenerateDataKey",
-          "kms:GenerateDataKeyWithoutPlaintext",
-          "s3:GetObject",
-          "s3:ListBucket",
-          "ssm:GetParameter"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -94,14 +74,7 @@
         "name": "distributionConfiguration",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateLaunchTemplateVersion",
-          "ec2:DescribeLaunchTemplates",
-          "ec2:ModifyLaunchTemplate",
-          "imagebuilder:TagResource",
-          "s3:ListBucket",
-          "ssm:GetParameter"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -119,19 +92,7 @@
         "name": "image",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ecr:BatchGetRepositoryScanningConfiguration",
-          "ecr:DescribeRepositories",
-          "iam:CreateServiceLinkedRole",
-          "iam:PassRole",
-          "imagebuilder:GetContainerRecipe",
-          "imagebuilder:GetDistributionConfiguration",
-          "imagebuilder:GetImageRecipe",
-          "imagebuilder:GetInfrastructureConfiguration",
-          "imagebuilder:GetWorkflow",
-          "imagebuilder:TagResource",
-          "inspector2:BatchGetAccountStatus"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -149,19 +110,7 @@
         "name": "imagePipeline",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ecr:BatchGetRepositoryScanningConfiguration",
-          "ecr:DescribeRepositories",
-          "iam:CreateServiceLinkedRole",
-          "iam:PassRole",
-          "imagebuilder:GetContainerRecipe",
-          "imagebuilder:GetDistributionConfiguration",
-          "imagebuilder:GetImageRecipe",
-          "imagebuilder:GetInfrastructureConfiguration",
-          "imagebuilder:GetWorkflow",
-          "imagebuilder:TagResource",
-          "inspector2:BatchGetAccountStatus"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -179,13 +128,7 @@
         "name": "imageRecipe",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeImages",
-          "imagebuilder:GetComponent",
-          "imagebuilder:GetImage",
-          "imagebuilder:TagResource",
-          "ssm:GetParameter"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -203,21 +146,14 @@
         "name": "infrastructureConfiguration",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeHosts",
-          "iam:PassRole",
-          "imagebuilder:TagResource",
-          "resource-groups:GetGroup",
-          "sns:Publish"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "imagebuilder:CreatedResourceTagKeys",
       "imagebuilder:CreatedResourceTag/${TagKey}",
+      "imagebuilder:CreatedResourceTagKeys",
       "imagebuilder:Ec2MetadataHttpTokens",
       "imagebuilder:StatusTopicArn"
     ],
@@ -232,10 +168,7 @@
         "name": "lifecyclePolicy",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "imagebuilder:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -254,14 +187,7 @@
         "name": "workflow",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "imagebuilder:TagResource",
-          "kms:Encrypt",
-          "kms:GenerateDataKey",
-          "kms:GenerateDataKeyWithoutPlaintext",
-          "s3:GetObject",
-          "s3:ListBucket"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -414,14 +340,7 @@
         "name": "image",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeImages",
-          "iam:PassRole",
-          "imagebuilder:GetDistributionConfiguration",
-          "imagebuilder:GetImage",
-          "imagebuilder:TagResource",
-          "ssm:GetParameter"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -443,9 +362,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "dependentActions": []
   },
   "getcomponentpolicy": {
     "name": "GetComponentPolicy",
@@ -655,9 +572,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "dependentActions": []
   },
   "getworkflowexecution": {
     "name": "GetWorkflowExecution",
@@ -687,9 +602,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "dependentActions": []
   },
   "importcomponent": {
     "name": "ImportComponent",
@@ -700,14 +613,7 @@
         "name": "component",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "imagebuilder:TagResource",
-          "kms:Encrypt",
-          "kms:GenerateDataKey",
-          "kms:GenerateDataKeyWithoutPlaintext",
-          "s3:GetObject",
-          "s3:ListBucket"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -725,15 +631,7 @@
         "name": "imageVersion",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole",
-          "iam:PassRole",
-          "imagebuilder:GetInfrastructureConfiguration",
-          "imagebuilder:GetWorkflow",
-          "imagebuilder:TagResource",
-          "s3:GetObject",
-          "s3:ListBucket"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -751,12 +649,7 @@
         "name": "imageVersion",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeImages",
-          "ec2:DescribeImportImageTasks",
-          "iam:CreateServiceLinkedRole",
-          "imagebuilder:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -895,9 +788,7 @@
         "name": "image",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "inspector2:ListFindings"
-        ]
+        "dependentActions": []
       },
       {
         "name": "imagePipeline",
@@ -1083,9 +974,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt"
-    ]
+    "dependentActions": []
   },
   "listworkflows": {
     "name": "ListWorkflows",
@@ -1098,7 +987,7 @@
   "putcomponentpolicy": {
     "name": "PutComponentPolicy",
     "description": "Grants permission to set the resource policy associated with a component",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "component",
@@ -1113,7 +1002,7 @@
   "putcontainerrecipepolicy": {
     "name": "PutContainerRecipePolicy",
     "description": "Grants permission to set the resource policy associated with a container recipe",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "containerRecipe",
@@ -1128,7 +1017,7 @@
   "putimagepolicy": {
     "name": "PutImagePolicy",
     "description": "Grants permission to set the resource policy associated with an image",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "image",
@@ -1143,7 +1032,7 @@
   "putimagerecipepolicy": {
     "name": "PutImageRecipePolicy",
     "description": "Grants permission to set the resource policy associated with an image recipe",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "imageRecipe",
@@ -1200,11 +1089,7 @@
         "name": "imagePipeline",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole",
-          "imagebuilder:GetImagePipeline",
-          "imagebuilder:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1231,7 +1116,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an Image Builder resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "component",
@@ -1289,15 +1174,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag an Image Builder resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "component",
@@ -1372,13 +1257,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateLaunchTemplateVersion",
-      "ec2:DescribeLaunchTemplates",
-      "ec2:ModifyLaunchTemplate",
-      "s3:ListBucket",
-      "ssm:GetParameter"
-    ]
+    "dependentActions": []
   },
   "updateimagepipeline": {
     "name": "UpdateImagePipeline",
@@ -1393,18 +1272,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ecr:BatchGetRepositoryScanningConfiguration",
-      "ecr:DescribeRepositories",
-      "iam:CreateServiceLinkedRole",
-      "iam:PassRole",
-      "imagebuilder:GetContainerRecipe",
-      "imagebuilder:GetDistributionConfiguration",
-      "imagebuilder:GetImageRecipe",
-      "imagebuilder:GetInfrastructureConfiguration",
-      "imagebuilder:GetWorkflow",
-      "inspector2:BatchGetAccountStatus"
-    ]
+    "dependentActions": []
   },
   "updateinfrastructureconfiguration": {
     "name": "UpdateInfrastructureConfiguration",
@@ -1415,18 +1283,12 @@
         "name": "infrastructureConfiguration",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeAvailabilityZones",
-          "ec2:DescribeHosts",
-          "iam:PassRole",
-          "resource-groups:GetGroup",
-          "sns:Publish"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "imagebuilder:CreatedResourceTagKeys",
       "imagebuilder:CreatedResourceTag/${TagKey}",
+      "imagebuilder:CreatedResourceTagKeys",
       "imagebuilder:Ec2MetadataHttpTokens",
       "imagebuilder:StatusTopicArn"
     ],
@@ -1441,9 +1303,7 @@
         "name": "lifecyclePolicy",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/inspector.json

@@ -250,7 +250,7 @@
   "settagsforresource": {
     "name": "SetTagsForResource",
     "description": "Grants permission to set tags (key and value pairs) to the assessment template that is specified by the ARN of the assessment template",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []

package/data/actions/inspector2.json

@@ -100,8 +100,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -634,7 +634,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or update the tags for an Amazon Inspector resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "CIS Scan Configuration",
@@ -669,15 +669,15 @@
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an Amazon Inspector resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "CIS Scan Configuration",
@@ -788,8 +788,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []

package/data/actions/interconnect.json

@@ -116,7 +116,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to apply tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "connection",
@@ -134,7 +134,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "connection",

package/data/actions/internetmonitor.json

@@ -1,4 +1,12 @@
 {
+  "link": {
+    "name": "Link",
+    "description": "Grants permission to share Internet Monitor resources with a monitoring account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createmonitor": {
     "name": "CreateMonitor",
     "description": "Grants permission to create a monitor",
@@ -107,15 +115,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "link": {
-    "name": "Link",
-    "isPermissionOnly": true,
-    "description": "Grants permission to share Internet Monitor resources with a monitoring account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listhealthevents": {
     "name": "ListHealthEvents",
     "description": "Grants permission to list all health events for a monitor",
@@ -195,7 +194,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Monitor",
@@ -213,7 +212,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Monitor",

package/data/actions/invoicing.json

@@ -1,4 +1,44 @@
 {
+  "getinvoicecorrection": {
+    "name": "GetInvoiceCorrection",
+    "description": "Grants permission to get Invoice Correction",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getinvoiceemaildeliverypreferences": {
+    "name": "GetInvoiceEmailDeliveryPreferences",
+    "description": "Grants permission to get Invoice Email Delivery Preferences",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listinvoicecorrections": {
+    "name": "ListInvoiceCorrections",
+    "description": "Grants permission to list Invoice Corrections",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putinvoiceemaildeliverypreferences": {
+    "name": "PutInvoiceEmailDeliveryPreferences",
+    "description": "Grants permission to put Invoice Email Delivery Preferences",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startinvoicecorrection": {
+    "name": "StartInvoiceCorrection",
+    "description": "Grants permission to start Invoice Correction",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetinvoiceprofile": {
     "name": "BatchGetInvoiceProfile",
     "description": "Grants permission to get invoice profile details for an account in your organization",
@@ -55,24 +95,6 @@
     ],
     "dependentActions": []
   },
-  "getinvoicecorrection": {
-    "name": "GetInvoiceCorrection",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get Invoice Correction",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getinvoiceemaildeliverypreferences": {
-    "name": "GetInvoiceEmailDeliveryPreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get Invoice Email Delivery Preferences",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getinvoicepdf": {
     "name": "GetInvoicePDF",
     "description": "Grants permission to get downloadable Invoice document pre-signed URL with supplemental documents",
@@ -104,15 +126,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listinvoicecorrections": {
-    "name": "ListInvoiceCorrections",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list Invoice Corrections",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listinvoicesummaries": {
     "name": "ListInvoiceSummaries",
     "description": "Grants permission to get Invoice summary information for your account or linked account",
@@ -154,15 +167,6 @@
     ],
     "dependentActions": []
   },
-  "putinvoiceemaildeliverypreferences": {
-    "name": "PutInvoiceEmailDeliveryPreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to put Invoice Email Delivery Preferences",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putprocurementportalpreference": {
     "name": "PutProcurementPortalPreference",
     "description": "Grants permission to update a procurement portal preference",
@@ -173,19 +177,10 @@
     ],
     "dependentActions": []
   },
-  "startinvoicecorrection": {
-    "name": "StartInvoiceCorrection",
-    "isPermissionOnly": true,
-    "description": "Grants permission to start Invoice Correction",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "invoice-unit",
@@ -195,16 +190,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "invoice-unit",
@@ -214,8 +209,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },