@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/rolesanywhere.json

@@ -8,9 +8,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createtrustanchor": {
     "name": "CreateTrustAnchor",
@@ -156,9 +154,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "enabletrustanchor": {
     "name": "EnableTrustAnchor",
@@ -334,7 +330,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "crl",
@@ -370,7 +366,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "crl",
@@ -430,9 +426,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updatetrustanchor": {
     "name": "UpdateTrustAnchor",

package/data/actions/route53-recovery-control-config.json

@@ -1,4 +1,34 @@
 {
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete the RAM access control policy for a cluster",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to define the RAM access control policy for a cluster",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createcluster": {
     "name": "CreateCluster",
     "description": "Grants permission to create a cluster",
@@ -91,22 +121,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteresourcepolicy": {
-    "name": "DeleteResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete the RAM access control policy for a cluster",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [
-      {
-        "name": "cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteroutingcontrol": {
     "name": "DeleteRoutingControl",
     "description": "Grants permission to delete a routing control",
@@ -300,26 +314,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putresourcepolicy": {
-    "name": "PutResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to define the RAM access control policy for a cluster",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [
-      {
-        "name": "cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",
@@ -341,15 +339,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cluster",

package/data/actions/route53-recovery-readiness.json

@@ -341,7 +341,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add a tag to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cell",
@@ -369,15 +369,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "cell",
@@ -405,8 +405,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },

package/data/actions/route53.json

@@ -23,9 +23,7 @@
         "name": "hostedzone",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -61,16 +59,16 @@
       }
     ],
     "conditionKeys": [
+      "route53:ChangeResourceRecordSetsActions",
       "route53:ChangeResourceRecordSetsNormalizedRecordNames",
-      "route53:ChangeResourceRecordSetsRecordTypes",
-      "route53:ChangeResourceRecordSetsActions"
+      "route53:ChangeResourceRecordSetsRecordTypes"
     ],
     "dependentActions": []
   },
   "changetagsforresource": {
     "name": "ChangeTagsForResource",
     "description": "Grants permission to add, edit, or delete tags for a health check or a hosted zone",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "healthcheck",
@@ -112,9 +110,7 @@
     "conditionKeys": [
       "route53:VPCs"
     ],
-    "dependentActions": [
-      "ec2:DescribeVpcs"
-    ]
+    "dependentActions": []
   },
   "createkeysigningkey": {
     "name": "CreateKeySigningKey",
@@ -391,9 +387,7 @@
         "name": "hostedzone",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeVpcs"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -722,9 +716,7 @@
     "conditionKeys": [
       "route53:VPCs"
     ],
-    "dependentActions": [
-      "ec2:DescribeVpcs"
-    ]
+    "dependentActions": []
   },
   "listqueryloggingconfigs": {
     "name": "ListQueryLoggingConfigs",

package/data/actions/route53domains.json

@@ -50,7 +50,7 @@
   "deletetagsfordomain": {
     "name": "DeleteTagsForDomain",
     "description": "Grants permission to delete the specified tags for a domain",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -258,7 +258,7 @@
   "updatetagsfordomain": {
     "name": "UpdateTagsForDomain",
     "description": "Grants permission to add or update tags for a specified domain",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []

package/data/actions/route53globalresolver.json

@@ -1,20 +1,19 @@
 {
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to deliver logs for a global resolver",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "global-resolver",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "associatehostedzone": {
@@ -393,10 +392,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:GetObject",
-      "s3:ListBucket"
-    ]
+    "dependentActions": []
   },
   "listaccesssources": {
     "name": "ListAccessSources",
@@ -526,7 +522,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "access-source",
@@ -568,7 +564,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "access-source",

package/data/actions/route53profiles.json

@@ -1,4 +1,34 @@
 {
+  "getprofilepolicy": {
+    "name": "GetProfilePolicy",
+    "description": "Grants permission to read the RAM access control policy for a Profile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putprofilepolicy": {
+    "name": "PutProfilePolicy",
+    "description": "Grants permission to define the RAM access control policy for a Profile",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associateprofile": {
     "name": "AssociateProfile",
     "description": "Grants permission to associates a Profile to the customer VPC",
@@ -9,9 +39,7 @@
       "aws:TagKeys",
       "route53profiles:ResourceIds"
     ],
-    "dependentActions": [
-      "ec2:DescribeVpcs"
-    ]
+    "dependentActions": []
   },
   "associateresourcetoprofile": {
     "name": "AssociateResourceToProfile",
@@ -19,11 +47,11 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "route53profiles:ResourceTypes",
+      "route53profiles:FirewallRuleGroupPriority",
       "route53profiles:HostedZoneDomains",
       "route53profiles:ResolverRuleDomains",
-      "route53profiles:FirewallRuleGroupPriority",
-      "route53profiles:ResourceArns"
+      "route53profiles:ResourceArns",
+      "route53profiles:ResourceTypes"
     ],
     "dependentActions": []
   },
@@ -62,11 +90,11 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "route53profiles:ResourceTypes",
+      "route53profiles:FirewallRuleGroupPriority",
       "route53profiles:HostedZoneDomains",
       "route53profiles:ResolverRuleDomains",
-      "route53profiles:FirewallRuleGroupPriority",
-      "route53profiles:ResourceArns"
+      "route53profiles:ResourceArns",
+      "route53profiles:ResourceTypes"
     ],
     "dependentActions": []
   },
@@ -86,22 +114,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getprofilepolicy": {
-    "name": "GetProfilePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read the RAM access control policy for a Profile",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "profile",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getprofileresourceassociation": {
     "name": "GetProfileResourceAssociation",
     "description": "Grants permission to get a Profile resource association based on the ProfileResourceAssociationId",
@@ -142,26 +154,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putprofilepolicy": {
-    "name": "PutProfilePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to define the RAM access control policy for a Profile",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "profile",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add a tag to the given resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "profile",
@@ -185,7 +181,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to delete a tag from the given resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "profile",
@@ -211,10 +207,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "route53profiles:ResourceTypes",
+      "route53profiles:FirewallRuleGroupPriority",
       "route53profiles:HostedZoneDomains",
       "route53profiles:ResolverRuleDomains",
-      "route53profiles:FirewallRuleGroupPriority"
+      "route53profiles:ResourceTypes"
     ],
     "dependentActions": []
   }