@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/payments.json

@@ -1,4 +1,60 @@
 {
+  "deletepaymentinstrument": {
+    "name": "DeletePaymentInstrument",
+    "description": "Grants permission to delete a payment instrument",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpaymentstatus": {
+    "name": "GetPaymentStatus",
+    "description": "Grants permission to get payment status of invoices",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpaymentinstruments": {
+    "name": "ListPaymentInstruments",
+    "description": "Grants permission to list payment instrument metadata",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpaymentpreferences": {
+    "name": "ListPaymentPreferences",
+    "description": "Grants permission to get payment preferences (preferred payment currency, preferred payment method, etc.)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "makepayment": {
+    "name": "MakePayment",
+    "description": "Grants permission to make a payment, authenticate a payment, verify a payment method, and generate a funding request document for Advance Pay",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatepaymentinstrument": {
+    "name": "UpdatePaymentInstrument",
+    "description": "Grants permission to update a payment instrument",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatepaymentpreferences": {
+    "name": "UpdatePaymentPreferences",
+    "description": "Grants permission to update payment preferences (preferred payment currency, preferred payment method, etc.)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "acceptfinancingapplicationterms": {
     "name": "AcceptFinancingApplicationTerms",
     "description": "Grants permission to accept financing application terms provided by a lender",
@@ -21,20 +77,11 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
-  "deletepaymentinstrument": {
-    "name": "DeletePaymentInstrument",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a payment instrument",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getfinancingapplication": {
     "name": "GetFinancingApplication",
     "description": "Grants permission to get information about a financing application",
@@ -75,22 +122,15 @@
       {
         "name": "payment-instrument",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getpaymentstatus": {
-    "name": "GetPaymentStatus",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get payment status of invoices",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listfinancingapplications": {
     "name": "ListFinancingApplications",
     "description": "Grants permission to list financing application metadata",
@@ -115,24 +155,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listpaymentinstruments": {
-    "name": "ListPaymentInstruments",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list payment instrument metadata",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listpaymentpreferences": {
-    "name": "ListPaymentPreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get payment preferences (preferred payment currency, preferred payment method, etc.)",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listpaymentprogramoptions": {
     "name": "ListPaymentProgramOptions",
     "description": "Grants permission to list information about payment options",
@@ -157,55 +179,50 @@
       {
         "name": "payment-instrument",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
     "dependentActions": []
   },
-  "makepayment": {
-    "name": "MakePayment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to make a payment, authenticate a payment, verify a payment method, and generate a funding request document for Advance Pay",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a payment resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "payment-instrument",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a payment resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "payment-instrument",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updatefinancingapplication": {
@@ -215,23 +232,5 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
-  },
-  "updatepaymentinstrument": {
-    "name": "UpdatePaymentInstrument",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update a payment instrument",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updatepaymentpreferences": {
-    "name": "UpdatePaymentPreferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update payment preferences (preferred payment currency, preferred payment method, etc.)",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }

package/data/actions/pca-connector-ad.json

@@ -9,15 +9,7 @@
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "acm-pca:DescribeCertificateAuthority",
-      "acm-pca:GetCertificate",
-      "acm-pca:GetCertificateAuthorityCertificate",
-      "acm-pca:IssueCertificate",
-      "ec2:CreateTags",
-      "ec2:CreateVpcEndpoint",
-      "ec2:DescribeVpcEndpoints"
-    ]
+    "dependentActions": []
   },
   "createdirectoryregistration": {
     "name": "CreateDirectoryRegistration",
@@ -29,10 +21,7 @@
       "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "ds:AuthorizeApplication",
-      "ds:DescribeDirectories"
-    ]
+    "dependentActions": []
   },
   "createserviceprincipalname": {
     "name": "CreateServicePrincipalName",
@@ -47,9 +36,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ds:UpdateAuthorizedApplication"
-    ]
+    "dependentActions": []
   },
   "createtemplate": {
     "name": "CreateTemplate",
@@ -98,10 +85,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DeleteVpcEndpoints",
-      "ec2:DescribeVpcEndpoints"
-    ]
+    "dependentActions": []
   },
   "deletedirectoryregistration": {
     "name": "DeleteDirectoryRegistration",
@@ -116,10 +100,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ds:UnauthorizeApplication",
-      "ds:UpdateAuthorizedApplication"
-    ]
+    "dependentActions": []
   },
   "deleteserviceprincipalname": {
     "name": "DeleteServicePrincipalName",
@@ -134,9 +115,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ds:UpdateAuthorizedApplication"
-    ]
+    "dependentActions": []
   },
   "deletetemplate": {
     "name": "DeleteTemplate",
@@ -315,7 +294,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a pca-connector-ad resource in your account",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Connector",
@@ -345,7 +324,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a pca-connector-ad resource in your account",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Connector",

package/data/actions/pca-connector-scep.json

@@ -26,12 +26,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "acm-pca:DescribeCertificateAuthority",
-      "acm-pca:GetCertificate",
-      "acm-pca:GetCertificateAuthorityCertificate",
-      "acm-pca:IssueCertificate"
-    ]
+    "dependentActions": []
   },
   "deletechallenge": {
     "name": "DeleteChallenge",
@@ -135,7 +130,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a pca-connector-scep resource in your account",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Challenge",
@@ -159,7 +154,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a pca-connector-scep resource in your account",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Challenge",

package/data/actions/pcs.json

@@ -1,7 +1,6 @@
 {
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to configure vended log delivery for AWS PCS cluster logs",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -21,22 +20,11 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:CreateNetworkInterfacePermission",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "ec2:GetSecurityGroupsForVpc",
-      "iam:CreateServiceLinkedRole",
-      "secretsmanager:CreateSecret",
-      "secretsmanager:TagResource"
-    ]
+    "dependentActions": []
   },
   "createcomputenodegroup": {
     "name": "CreateComputeNodeGroup",
@@ -47,29 +35,12 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateFleet",
-          "ec2:CreateLaunchTemplate",
-          "ec2:CreateLaunchTemplateVersion",
-          "ec2:CreateTags",
-          "ec2:DescribeImages",
-          "ec2:DescribeInstanceStatus",
-          "ec2:DescribeInstanceTypes",
-          "ec2:DescribeInstances",
-          "ec2:DescribeLaunchTemplateVersions",
-          "ec2:DescribeLaunchTemplates",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs",
-          "ec2:RunInstances",
-          "iam:GetInstanceProfile",
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -87,8 +58,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -106,10 +77,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DeleteNetworkInterface",
-      "secretsmanager:DeleteSecret"
-    ]
+    "dependentActions": []
   },
   "deletecomputenodegroup": {
     "name": "DeleteComputeNodeGroup",
@@ -120,10 +88,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DeleteLaunchTemplate",
-          "ec2:TerminateInstances"
-        ]
+        "dependentActions": []
       },
       {
         "name": "computenodegroup",
@@ -272,14 +237,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "secretsmanager:GetSecretValue"
-    ]
+    "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -315,7 +278,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -360,18 +323,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:CreateNetworkInterfacePermission",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "ec2:GetSecurityGroupsForVpc",
-      "iam:CreateServiceLinkedRole",
-      "secretsmanager:CreateSecret",
-      "secretsmanager:TagResource"
-    ]
+    "dependentActions": []
   },
   "updatecomputenodegroup": {
     "name": "UpdateComputeNodeGroup",
@@ -382,24 +334,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateFleet",
-          "ec2:CreateLaunchTemplate",
-          "ec2:CreateLaunchTemplateVersion",
-          "ec2:CreateTags",
-          "ec2:DescribeImages",
-          "ec2:DescribeInstanceStatus",
-          "ec2:DescribeInstanceTypes",
-          "ec2:DescribeInstances",
-          "ec2:DescribeLaunchTemplateVersions",
-          "ec2:DescribeLaunchTemplates",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeVpcs",
-          "ec2:RunInstances",
-          "iam:GetInstanceProfile",
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "computenodegroup",

package/data/actions/personalize.json

@@ -8,9 +8,7 @@
         "name": "batchInferenceJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "solution",
@@ -34,9 +32,7 @@
         "name": "batchSegmentJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -78,9 +74,7 @@
         "name": "dataDeletionJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "datasetGroup",
@@ -143,9 +137,7 @@
         "name": "dataset",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "datasetExportJob",
@@ -187,9 +179,7 @@
         "name": "dataset",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "datasetImportJob",
@@ -261,9 +251,7 @@
         "name": "datasetGroup",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "metricAttribution",
@@ -1185,7 +1173,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "batchInferenceJob",
@@ -1269,7 +1257,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "batchInferenceJob",

package/data/actions/pi.json

@@ -197,7 +197,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to call TagResource API to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "perf-reports-resource",
@@ -215,7 +215,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to call UntagResource API to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "perf-reports-resource",

package/data/actions/pipes.json

@@ -8,9 +8,7 @@
         "name": "pipe",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -116,7 +114,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "pipe",
@@ -135,7 +133,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "pipe",
@@ -159,9 +157,7 @@
         "name": "pipe",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/polly.json

@@ -104,9 +104,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:PutObject"
-    ]
+    "dependentActions": []
   },
   "synthesizespeech": {
     "name": "SynthesizeSpeech",