@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/backup-search.json

@@ -117,9 +117,7 @@
         "name": "searchJob",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -146,7 +144,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "searchExportJob",
@@ -170,7 +168,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "searchExportJob",

package/data/actions/backup-storage.json

@@ -1,7 +1,6 @@
 {
   "commitbackupjob": {
     "name": "CommitBackupJob",
-    "isPermissionOnly": true,
     "description": "Grants permission to commit backup job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "deleteobjects": {
     "name": "DeleteObjects",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete objects",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "describebackupjob": {
     "name": "DescribeBackupJob",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe backup job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "getbasebackup": {
     "name": "GetBaseBackup",
-    "isPermissionOnly": true,
     "description": "Grants permission to get base backup",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "getchunk": {
     "name": "GetChunk",
-    "isPermissionOnly": true,
     "description": "Grants permission to get data from a recovery point for a restore job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -46,7 +41,6 @@
   },
   "getincrementalbasebackup": {
     "name": "GetIncrementalBaseBackup",
-    "isPermissionOnly": true,
     "description": "Grants permission to get incremental base backup",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -55,7 +49,6 @@
   },
   "getobjectmetadata": {
     "name": "GetObjectMetadata",
-    "isPermissionOnly": true,
     "description": "Grants permission to get metadata from a recovery point for a restore job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -64,7 +57,6 @@
   },
   "listchunks": {
     "name": "ListChunks",
-    "isPermissionOnly": true,
     "description": "Grants permission to list data from a recovery point for a restore job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -73,7 +65,6 @@
   },
   "listobjects": {
     "name": "ListObjects",
-    "isPermissionOnly": true,
     "description": "Grants permission to list data from a recovery point for a restore job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -82,7 +73,6 @@
   },
   "mountcapsule": {
     "name": "MountCapsule",
-    "isPermissionOnly": true,
     "description": "Associates a KMS key to a backup vault",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -91,7 +81,6 @@
   },
   "notifyobjectcomplete": {
     "name": "NotifyObjectComplete",
-    "isPermissionOnly": true,
     "description": "Grants permission to mark an uploaded data as completed for a backup job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -100,7 +89,6 @@
   },
   "putchunk": {
     "name": "PutChunk",
-    "isPermissionOnly": true,
     "description": "Grants permission to upload data to an AWS Backup-managed recovery point for a backup job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -109,7 +97,6 @@
   },
   "putobject": {
     "name": "PutObject",
-    "isPermissionOnly": true,
     "description": "Grants permission to put object",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -118,7 +105,6 @@
   },
   "startobject": {
     "name": "StartObject",
-    "isPermissionOnly": true,
     "description": "Grants permission to upload data to an AWS Backup-managed recovery point for a backup job",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -127,7 +113,6 @@
   },
   "updateobjectcomplete": {
     "name": "UpdateObjectComplete",
-    "isPermissionOnly": true,
     "description": "Grants permission to update object complete",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/backup.json

@@ -1,7 +1,25 @@
 {
-  "associatebackupvaultmpaapprovalteam": {
-    "name": "AssociateBackupVaultMpaApprovalTeam",
-    "description": "Grants permission to associate an MPA approval team with a backup vault",
+  "copyfrombackupvault": {
+    "name": "CopyFromBackupVault",
+    "description": "Grants permission to copy from a backup vault",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "recoveryPoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "backup:CopyTargetOrgPaths",
+      "backup:CopyTargets"
+    ],
+    "dependentActions": []
+  },
+  "copyintobackupvault": {
+    "name": "CopyIntoBackupVault",
+    "description": "Grants permission to copy into a backup vault",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -12,17 +30,17 @@
       }
     ],
     "conditionKeys": [
-      "backup:MpaApprovalTeamArn"
+      "aws:RequestTag/${TagKey}"
     ],
     "dependentActions": []
   },
-  "cancellegalhold": {
-    "name": "CancelLegalHold",
-    "description": "Grants permission to cancel a legal hold",
+  "createbackupaccesspoint": {
+    "name": "CreateBackupAccessPoint",
+    "description": "Grants permission to create a new access point for backup instant access",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "legalHold",
+        "name": "recoveryPoint",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -31,29 +49,93 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "copyfrombackupvault": {
-    "name": "CopyFromBackupVault",
-    "isPermissionOnly": true,
-    "description": "Grants permission to copy from a backup vault",
+  "deletebackupaccesspoint": {
+    "name": "DeleteBackupAccessPoint",
+    "description": "Grants permission to delete the access point",
     "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletebackupvaultsharingpolicy": {
+    "name": "DeleteBackupVaultSharingPolicy",
+    "description": "Grants permission to delete backup vault sharing policy",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
-        "name": "recoveryPoint",
+        "name": "backupVault",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "backup:CopyTargets",
-      "backup:CopyTargetOrgPaths"
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebackupaccesspoint": {
+    "name": "DescribeBackupAccessPoint",
+    "description": "Grants permission to return information about the specified access point",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getbackupvaultsharingpolicy": {
+    "name": "GetBackupVaultSharingPolicy",
+    "description": "Grants permission to get backup vault sharing policy",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
     ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "copyintobackupvault": {
-    "name": "CopyIntoBackupVault",
-    "isPermissionOnly": true,
-    "description": "Grants permission to copy into a backup vault",
+  "listindexedrecoverypointsforsearch": {
+    "name": "ListIndexedRecoveryPointsForSearch",
+    "description": "Grants permission to list indexed recovery points to search",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putbackupvaultsharingpolicy": {
+    "name": "PutBackupVaultSharingPolicy",
+    "description": "Grants permission to add a sharing policy to the backup vault",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "backupVault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchrecoverypoint": {
+    "name": "SearchRecoveryPoint",
+    "description": "Grants permission to search a recovery point",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [
+      {
+        "name": "recoveryPoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associatebackupvaultmpaapprovalteam": {
+    "name": "AssociateBackupVaultMpaApprovalTeam",
+    "description": "Grants permission to associate an MPA approval team with a backup vault",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -64,18 +146,17 @@
       }
     ],
     "conditionKeys": [
-      "aws:RequestTag/${TagKey}"
+      "backup:MpaApprovalTeamArn"
     ],
     "dependentActions": []
   },
-  "createbackupaccesspoint": {
-    "name": "CreateBackupAccessPoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a new access point for backup instant access",
+  "cancellegalhold": {
+    "name": "CancelLegalHold",
+    "description": "Grants permission to cancel a legal hold",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "recoveryPoint",
+        "name": "legalHold",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -93,9 +174,7 @@
         "name": "backupPlan",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -117,9 +196,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createbackupvault": {
     "name": "CreateBackupVault",
@@ -190,8 +267,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "backup:MinRetentionDays",
-      "backup:MaxRetentionDays"
+      "backup:MaxRetentionDays",
+      "backup:MinRetentionDays"
     ],
     "dependentActions": []
   },
@@ -263,9 +340,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "createtieringconfiguration": {
     "name": "CreateTieringConfiguration",
@@ -285,15 +360,6 @@
     ],
     "dependentActions": []
   },
-  "deletebackupaccesspoint": {
-    "name": "DeleteBackupAccessPoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete the access point",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletebackupplan": {
     "name": "DeleteBackupPlan",
     "description": "Grants permission to delete a backup plan",
@@ -342,7 +408,7 @@
   "deletebackupvaultaccesspolicy": {
     "name": "DeleteBackupVaultAccessPolicy",
     "description": "Grants permission to delete backup vault access policy",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "backupVault",
@@ -384,22 +450,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletebackupvaultsharingpolicy": {
-    "name": "DeleteBackupVaultSharingPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete backup vault sharing policy",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [
-      {
-        "name": "backupVault",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteframework": {
     "name": "DeleteFramework",
     "description": "Grants permission to delete a framework",
@@ -490,15 +540,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describebackupaccesspoint": {
-    "name": "DescribeBackupAccessPoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to return information about the specified access point",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describebackupjob": {
     "name": "DescribeBackupJob",
     "description": "Grants permission to describe a backup job",
@@ -752,22 +793,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getbackupvaultsharingpolicy": {
-    "name": "GetBackupVaultSharingPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get backup vault sharing policy",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "backupVault",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getlegalhold": {
     "name": "GetLegalHold",
     "description": "Grants permission to get a legal hold",
@@ -999,15 +1024,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listindexedrecoverypointsforsearch": {
-    "name": "ListIndexedRecoveryPointsForSearch",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list indexed recovery points to search",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listlegalholds": {
     "name": "ListLegalHolds",
     "description": "Grants permission to list legal holds",
@@ -1239,7 +1255,7 @@
   "putbackupvaultaccesspolicy": {
     "name": "PutBackupVaultAccessPolicy",
     "description": "Grants permission to add an access policy to the backup vault",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "backupVault",
@@ -1265,8 +1281,8 @@
     ],
     "conditionKeys": [
       "backup:ChangeableForDays",
-      "backup:MinRetentionDays",
-      "backup:MaxRetentionDays"
+      "backup:MaxRetentionDays",
+      "backup:MinRetentionDays"
     ],
     "dependentActions": []
   },
@@ -1285,22 +1301,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putbackupvaultsharingpolicy": {
-    "name": "PutBackupVaultSharingPolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to add a sharing policy to the backup vault",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [
-      {
-        "name": "backupVault",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putrestorevalidationresult": {
     "name": "PutRestoreValidationResult",
     "description": "Grants permission to put a restore validation result",
@@ -1324,22 +1324,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "searchrecoverypoint": {
-    "name": "SearchRecoveryPoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to search a recovery point",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [
-      {
-        "name": "recoveryPoint",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startbackupjob": {
     "name": "StartBackupJob",
     "description": "Grants permission to start a new backup job",
@@ -1353,9 +1337,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "startcopyjob": {
     "name": "StartCopyJob",
@@ -1370,9 +1352,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "startreportjob": {
     "name": "StartReportJob",
@@ -1402,9 +1382,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "startscanjob": {
     "name": "StartScanJob",
@@ -1419,9 +1397,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "stopbackupjob": {
     "name": "StopBackupJob",
@@ -1434,7 +1410,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "backupPlan",
@@ -1494,7 +1470,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "backupPlan",
@@ -1563,9 +1539,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updateframework": {
     "name": "UpdateFramework",
@@ -1675,9 +1649,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updatetieringconfiguration": {
     "name": "UpdateTieringConfiguration",