@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/proton.json

@@ -93,8 +93,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -107,14 +107,12 @@
         "name": "environment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "proton:EnvironmentTemplate"
     ],
     "dependentActions": []
@@ -125,8 +123,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -143,8 +141,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -161,8 +159,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -179,8 +177,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -197,8 +195,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -215,8 +213,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -229,14 +227,12 @@
         "name": "service",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codestar-connections:PassConnection"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "proton:ServiceTemplate"
     ],
     "dependentActions": []
@@ -254,8 +250,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
       "proton:ServiceTemplate"
     ],
     "dependentActions": []
@@ -281,8 +277,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -299,8 +295,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -317,8 +313,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -335,8 +331,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -976,14 +972,14 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "environment",
-        "required": true,
+        "name": "deployment",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "deployment",
-        "required": false,
+        "name": "environment",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1089,20 +1085,20 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "service",
-        "required": true,
+        "name": "deployment",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "service-instance",
+        "name": "service",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "deployment",
-        "required": false,
+        "name": "service-instance",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1145,14 +1141,14 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "service",
-        "required": true,
+        "name": "deployment",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "deployment",
-        "required": false,
+        "name": "service",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1368,7 +1364,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "component",
@@ -1456,15 +1452,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "component",
@@ -1562,9 +1558,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updateaccountsettings": {
     "name": "UpdateAccountSettings",
@@ -1572,9 +1566,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updatecomponent": {
     "name": "UpdateComponent",
@@ -1600,9 +1592,7 @@
         "name": "environment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/purchase-orders.json

@@ -1,44 +1,42 @@
 {
   "addpurchaseorder": {
     "name": "AddPurchaseOrder",
-    "isPermissionOnly": true,
     "description": "Grants permission to add a new purchase order",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "deletepurchaseorder": {
     "name": "DeletePurchaseOrder",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a purchase order",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "getconsoleactionsetenforced": {
     "name": "GetConsoleActionSetEnforced",
-    "isPermissionOnly": true,
     "description": "Grants permission to view whether existing or fine-grained IAM actions are being used to control authorization to Billing, Cost Management, and Account consoles",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -47,43 +45,40 @@
   },
   "getpurchaseorder": {
     "name": "GetPurchaseOrder",
-    "isPermissionOnly": true,
     "description": "Grants permission to get a purchase order",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listpurchaseorderinvoices": {
     "name": "ListPurchaseOrderInvoices",
-    "isPermissionOnly": true,
     "description": "Grants permission to list purchase order invoices",
     "accessLevel": "List",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listpurchaseorders": {
     "name": "ListPurchaseOrders",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all purchase orders for an account",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -92,84 +87,79 @@
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to list tags for a purchase order",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "modifypurchaseorders": {
     "name": "ModifyPurchaseOrders",
-    "isPermissionOnly": true,
     "description": "Grants permission to modify purchase orders and details",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to tag purchase orders with given key value pairs",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to remove tags from a purchase order",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updateconsoleactionsetenforced": {
     "name": "UpdateConsoleActionSetEnforced",
-    "isPermissionOnly": true,
     "description": "Grants permission to change whether existing or fine-grained IAM actions will be used to control authorization to Billing, Cost Management, and Account consoles",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -178,56 +168,55 @@
   },
   "updatepurchaseorder": {
     "name": "UpdatePurchaseOrder",
-    "isPermissionOnly": true,
     "description": "Grants permission to update an existing purchase order",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updatepurchaseorderstatus": {
     "name": "UpdatePurchaseOrderStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to set purchase order status",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "viewpurchaseorders": {
     "name": "ViewPurchaseOrders",
-    "isPermissionOnly": true,
     "description": "Grants permission to view purchase orders and details",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "purchase-order",
         "required": false,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   }
 }