@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/supportapp.json

@@ -1,4 +1,28 @@
 {
+  "describeslackchannels": {
+    "name": "DescribeSlackChannels",
+    "description": "Grants permission to list all public Slack channels in a workspace that have invited the AWS Support App",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getslackoauthparameters": {
+    "name": "GetSlackOauthParameters",
+    "description": "Grants permission to get parameters for the Slack OAuth code, which the AWS Support App uses to authorize the workspace",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "redeemslackoauthcode": {
+    "name": "RedeemSlackOauthCode",
+    "description": "Grants permission to redeem the Slack OAuth code, which the AWS Support App uses to authorize the workspace",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createslackchannelconfiguration": {
     "name": "CreateSlackChannelConfiguration",
     "description": "Grants permission to create a Slack channel configuration for your account",
@@ -31,15 +55,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeslackchannels": {
-    "name": "DescribeSlackChannels",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list all public Slack channels in a workspace that have invited the AWS Support App",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getaccountalias": {
     "name": "GetAccountAlias",
     "description": "Grants permission to get the alias for your account",
@@ -48,15 +63,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getslackoauthparameters": {
-    "name": "GetSlackOauthParameters",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get parameters for the Slack OAuth code, which the AWS Support App uses to authorize the workspace",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listslackchannelconfigurations": {
     "name": "ListSlackChannelConfigurations",
     "description": "Grants permission to list all Slack channel configurations for your account",
@@ -81,15 +87,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "redeemslackoauthcode": {
-    "name": "RedeemSlackOauthCode",
-    "isPermissionOnly": true,
-    "description": "Grants permission to redeem the Slack OAuth code, which the AWS Support App uses to authorize the workspace",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "registerslackworkspacefororganization": {
     "name": "RegisterSlackWorkspaceForOrganization",
     "description": "Grants permission to register a Slack workspace for an AWS account that is part of an organization",

package/data/actions/supportauthz.json

@@ -0,0 +1,156 @@
+{
+  "registerkey": {
+    "name": "RegisterKey",
+    "description": "Grants permission to register a KMS key to use for a support permit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createsupportpermit": {
+    "name": "CreateSupportPermit",
+    "description": "Grants permission to create a support permit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletesupportpermit": {
+    "name": "DeleteSupportPermit",
+    "description": "Grants permission to delete a support permit",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "supportpermit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "getaction": {
+    "name": "GetAction",
+    "description": "Grants permission to retrieve details about a support action",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsupportpermit": {
+    "name": "GetSupportPermit",
+    "description": "Grants permission to retrieve a support permit",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "supportpermit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listactions": {
+    "name": "ListActions",
+    "description": "Grants permission to list available support actions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsupportpermitrequests": {
+    "name": "ListSupportPermitRequests",
+    "description": "Grants permission to list support permit requests",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsupportpermits": {
+    "name": "ListSupportPermits",
+    "description": "Grants permission to list support permits",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "supportpermit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "rejectsupportpermitrequest": {
+    "name": "RejectSupportPermitRequest",
+    "description": "Grants permission to reject a support permit request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "supportpermitrequest",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to a resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "supportpermit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a resource",
+    "accessLevel": "Tagging, Write",
+    "resourceTypes": [
+      {
+        "name": "supportpermit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  }
+}

package/data/actions/supportplans.json

@@ -1,7 +1,6 @@
 {
   "createsupportplanschedule": {
     "name": "CreateSupportPlanSchedule",
-    "isPermissionOnly": true,
     "description": "Grants permission to create support plan schedules for this AWS account",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "getsupportplan": {
     "name": "GetSupportPlan",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details about the current support plan for this AWS account",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "getsupportplanupdatestatus": {
     "name": "GetSupportPlanUpdateStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details about the status for a request to update a support plan",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "listsupportplanmodifiers": {
     "name": "ListSupportPlanModifiers",
-    "isPermissionOnly": true,
     "description": "Grants permission to view a list of all support plan modifiers for this AWS account",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "startsupportplanupdate": {
     "name": "StartSupportPlanUpdate",
-    "isPermissionOnly": true,
     "description": "Grants permission to update the support plan for this AWS account",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/swf.json

@@ -1,7 +1,6 @@
 {
   "canceltimer": {
     "name": "CancelTimer",
-    "isPermissionOnly": true,
     "description": "Grants permission to cancel a previously started timer and record a TimerCanceled event in the history",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -17,7 +16,6 @@
   },
   "cancelworkflowexecution": {
     "name": "CancelWorkflowExecution",
-    "isPermissionOnly": true,
     "description": "Grants permission to close the workflow execution and record a WorkflowExecutionCanceled event in the history",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -33,7 +31,6 @@
   },
   "completeworkflowexecution": {
     "name": "CompleteWorkflowExecution",
-    "isPermissionOnly": true,
     "description": "Grants permission to close the workflow execution and record a WorkflowExecutionCompleted event in the history",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -49,7 +46,6 @@
   },
   "continueasnewworkflowexecution": {
     "name": "ContinueAsNewWorkflowExecution",
-    "isPermissionOnly": true,
     "description": "Grants permission to close the workflow execution and start a new workflow execution of the same type using the same workflow ID and a unique run Id",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -63,6 +59,126 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "failworkflowexecution": {
+    "name": "FailWorkflowExecution",
+    "description": "Grants permission to close the workflow execution and record a WorkflowExecutionFailed event in the history",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "recordmarker": {
+    "name": "RecordMarker",
+    "description": "Grants permission to record a MarkerRecorded event in the history",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "requestcancelactivitytask": {
+    "name": "RequestCancelActivityTask",
+    "description": "Grants permission to attempt to cancel a previously scheduled activity task",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "requestcancelexternalworkflowexecution": {
+    "name": "RequestCancelExternalWorkflowExecution",
+    "description": "Grants permission to request that a request be made to cancel the specified external workflow execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "scheduleactivitytask": {
+    "name": "ScheduleActivityTask",
+    "description": "Grants permission to schedule an activity task",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "signalexternalworkflowexecution": {
+    "name": "SignalExternalWorkflowExecution",
+    "description": "Grants permission to request a signal to be delivered to the specified external workflow execution and records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startchildworkflowexecution": {
+    "name": "StartChildWorkflowExecution",
+    "description": "Grants permission to request that a child workflow execution be started",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "starttimer": {
+    "name": "StartTimer",
+    "description": "Grants permission to start a timer for a workflow execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domain",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "countclosedworkflowexecutions": {
     "name": "CountClosedWorkflowExecutions",
     "description": "Grants permission to return the number of closed workflow executions within the given domain that meet the specified filtering criteria",
@@ -288,22 +404,6 @@
     ],
     "dependentActions": []
   },
-  "failworkflowexecution": {
-    "name": "FailWorkflowExecution",
-    "isPermissionOnly": true,
-    "description": "Grants permission to close the workflow execution and record a WorkflowExecutionFailed event in the history",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getworkflowexecutionhistory": {
     "name": "GetWorkflowExecutionHistory",
     "description": "Grants permission to return the history of the specified workflow execution",
@@ -459,22 +559,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "recordmarker": {
-    "name": "RecordMarker",
-    "isPermissionOnly": true,
-    "description": "Grants permission to record a MarkerRecorded event in the history",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "registeractivitytype": {
     "name": "RegisterActivityType",
     "description": "Grants permission to register a new activity type along with its configuration settings in the specified domain",
@@ -500,8 +584,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -524,38 +608,6 @@
     ],
     "dependentActions": []
   },
-  "requestcancelactivitytask": {
-    "name": "RequestCancelActivityTask",
-    "isPermissionOnly": true,
-    "description": "Grants permission to attempt to cancel a previously scheduled activity task",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "requestcancelexternalworkflowexecution": {
-    "name": "RequestCancelExternalWorkflowExecution",
-    "isPermissionOnly": true,
-    "description": "Grants permission to request that a request be made to cancel the specified external workflow execution",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "requestcancelworkflowexecution": {
     "name": "RequestCancelWorkflowExecution",
     "description": "Grants permission to record a WorkflowExecutionCancelRequested event in the currently running workflow execution identified by the given domain, workflowId, and runId",
@@ -642,38 +694,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "scheduleactivitytask": {
-    "name": "ScheduleActivityTask",
-    "isPermissionOnly": true,
-    "description": "Grants permission to schedule an activity task",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "signalexternalworkflowexecution": {
-    "name": "SignalExternalWorkflowExecution",
-    "isPermissionOnly": true,
-    "description": "Grants permission to request a signal to be delivered to the specified external workflow execution and records",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "signalworkflowexecution": {
     "name": "SignalWorkflowExecution",
     "description": "Grants permission to record a WorkflowExecutionSignaled event in the workflow execution history and create a decision task for the workflow execution identified by the given domain, workflowId and runId",
@@ -689,38 +709,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "startchildworkflowexecution": {
-    "name": "StartChildWorkflowExecution",
-    "isPermissionOnly": true,
-    "description": "Grants permission to request that a child workflow execution be started",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "starttimer": {
-    "name": "StartTimer",
-    "isPermissionOnly": true,
-    "description": "Grants permission to start a timer for a workflow execution",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "domain",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startworkflowexecution": {
     "name": "StartWorkflowExecution",
     "description": "Grants permission to start an execution of the workflow type in the specified domain using the provided workflowId and input data",
@@ -748,7 +736,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an AWS SWF resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "domain",
@@ -758,8 +746,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -832,7 +820,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a tag from an AWS SWF resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "domain",

package/data/actions/synthetics.json

@@ -297,7 +297,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add one or more tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "canary",
@@ -321,7 +321,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove one or more tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "canary",

package/data/actions/tag.json

@@ -58,7 +58,7 @@
   "tagresources": {
     "name": "TagResources",
     "description": "Grants permission to apply one or more tags to the specified resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -66,7 +66,7 @@
   "untagresources": {
     "name": "UntagResources",
     "description": "Grants permission to remove the specified tags from the specified resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []