@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/organizations.json

@@ -12,9 +12,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "attachpolicy": {
     "name": "AttachPolicy",
@@ -22,20 +20,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "policy",
-        "required": true,
+        "name": "account",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "account",
+        "name": "organizationalunit",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "organizationalunit",
-        "required": false,
+        "name": "policy",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -88,8 +86,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -100,8 +98,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -111,9 +109,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createorganizationalunit": {
     "name": "CreateOrganizationalUnit",
@@ -145,10 +141,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "organizations:PolicyType",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "organizations:PolicyType"
     ],
     "dependentActions": []
   },
@@ -348,8 +344,8 @@
       }
     ],
     "conditionKeys": [
-      "organizations:TransferType",
-      "organizations:TransferDirection"
+      "organizations:TransferDirection",
+      "organizations:TransferType"
     ],
     "dependentActions": []
   },
@@ -359,20 +355,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "policy",
-        "required": true,
+        "name": "account",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "account",
+        "name": "organizationalunit",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "organizationalunit",
-        "required": false,
+        "name": "policy",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -481,8 +477,8 @@
       }
     ],
     "conditionKeys": [
-      "organizations:TransferType",
-      "organizations:TransferDirection"
+      "organizations:TransferDirection",
+      "organizations:TransferType"
     ],
     "dependentActions": []
   },
@@ -634,8 +630,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "organizations:TransferType",
-      "organizations:TransferDirection"
+      "organizations:TransferDirection",
+      "organizations:TransferType"
     ],
     "dependentActions": []
   },
@@ -666,8 +662,8 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [
-      "organizations:TransferType",
-      "organizations:TransferDirection"
+      "organizations:TransferDirection",
+      "organizations:TransferType"
     ],
     "dependentActions": []
   },
@@ -772,8 +768,8 @@
         "name": "responsibilitytransfer",
         "required": false,
         "conditionKeys": [
-          "organizations:TransferType",
-          "organizations:TransferDirection"
+          "organizations:TransferDirection",
+          "organizations:TransferType"
         ],
         "dependentActions": []
       },
@@ -886,7 +882,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add one or more tags to the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "account",
@@ -918,8 +914,8 @@
         "name": "responsibilitytransfer",
         "required": false,
         "conditionKeys": [
-          "organizations:TransferType",
-          "organizations:TransferDirection"
+          "organizations:TransferDirection",
+          "organizations:TransferType"
         ],
         "dependentActions": []
       },
@@ -931,8 +927,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "organizations:PolicyType"
     ],
     "dependentActions": []
@@ -950,15 +946,15 @@
       }
     ],
     "conditionKeys": [
-      "organizations:TransferType",
-      "organizations:TransferDirection"
+      "organizations:TransferDirection",
+      "organizations:TransferType"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove one or more tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "account",
@@ -988,8 +984,8 @@
         "name": "responsibilitytransfer",
         "required": false,
         "conditionKeys": [
-          "organizations:TransferType",
-          "organizations:TransferDirection"
+          "organizations:TransferDirection",
+          "organizations:TransferType"
         ],
         "dependentActions": []
       },
@@ -1051,8 +1047,8 @@
       }
     ],
     "conditionKeys": [
-      "organizations:TransferType",
-      "organizations:TransferDirection"
+      "organizations:TransferDirection",
+      "organizations:TransferType"
     ],
     "dependentActions": []
   }

package/data/actions/osis.json

@@ -5,16 +5,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:PassRole",
-      "kms:DescribeKey",
-      "kms:GenerateDataKeyWithoutPlaintext",
-      "logs:CreateLogDelivery"
-    ]
+    "dependentActions": []
   },
   "createpipelineendpoint": {
     "name": "CreatePipelineEndpoint",
@@ -25,14 +19,12 @@
         "name": "pipeline",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -49,11 +41,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "logs:DeleteLogDelivery",
-      "logs:GetLogDelivery",
-      "logs:ListLogDeliveries"
-    ]
+    "dependentActions": []
   },
   "deletepipelineendpoint": {
     "name": "DeletePipelineEndpoint",
@@ -270,7 +258,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to attach resource tags to an OpenSearch Ingestion pipeline",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "pipeline",
@@ -288,7 +276,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove resource tags from an OpenSearch Ingestion Service pipeline",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "pipeline",
@@ -315,14 +303,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole",
-      "kms:DescribeKey",
-      "kms:GenerateDataKeyWithoutPlaintext",
-      "logs:GetLogDelivery",
-      "logs:ListLogDeliveries",
-      "logs:UpdateLogDelivery"
-    ]
+    "dependentActions": []
   },
   "validatepipeline": {
     "name": "ValidatePipeline",

package/data/actions/outposts.json

@@ -446,7 +446,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "outpost",
@@ -470,7 +470,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "outpost",

package/data/actions/panorama.json

@@ -1,12 +1,28 @@
 {
+  "describesoftware": {
+    "name": "DescribeSoftware",
+    "description": "Grants permission to view details about a software version for the AWS Panorama Appliance",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getwebsocketurl": {
+    "name": "GetWebSocketURL",
+    "description": "Grants permission to generate a WebSocket endpoint for communication with AWS Panorama",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createapplicationinstance": {
     "name": "CreateApplicationInstance",
     "description": "Grants permission to create an AWS Panorama Application Instance",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -32,8 +48,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -53,7 +69,9 @@
       {
         "name": "device",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -68,7 +86,9 @@
       {
         "name": "package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -83,7 +103,9 @@
       {
         "name": "package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -98,7 +120,9 @@
       {
         "name": "applicationInstance",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -113,7 +137,9 @@
       {
         "name": "applicationInstance",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -128,7 +154,9 @@
       {
         "name": "device",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -167,7 +195,9 @@
       {
         "name": "package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -190,31 +220,15 @@
       {
         "name": "package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describesoftware": {
-    "name": "DescribeSoftware",
-    "isPermissionOnly": true,
-    "description": "Grants permission to view details about a software version for the AWS Panorama Appliance",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getwebsocketurl": {
-    "name": "GetWebSocketURL",
-    "isPermissionOnly": true,
-    "description": "Grants permission to generate a WebSocket endpoint for communication with AWS Panorama",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listapplicationinstancedependencies": {
     "name": "ListApplicationInstanceDependencies",
     "description": "Grants permission to retrieve a list of application instance dependencies in AWS Panorama",
@@ -223,7 +237,9 @@
       {
         "name": "applicationInstance",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -238,7 +254,9 @@
       {
         "name": "applicationInstance",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -253,7 +271,9 @@
       {
         "name": "device",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -276,7 +296,9 @@
       {
         "name": "device",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -323,19 +345,25 @@
       {
         "name": "applicationInstance",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "device",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       },
       {
         "name": "package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -348,8 +376,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -361,7 +389,9 @@
       {
         "name": "package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -376,7 +406,9 @@
       {
         "name": "applicationInstance",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -391,7 +423,9 @@
       {
         "name": "applicationInstance",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -401,60 +435,76 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource in AWS Panorama",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "applicationInstance",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "device",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource in AWS Panorama",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "applicationInstance",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "device",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       },
       {
         "name": "package",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updatedevicemetadata": {
@@ -465,7 +515,9 @@
       {
         "name": "device",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],