@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/workspaces.json

@@ -1,4 +1,125 @@
 {
+  "createrootclientcertificate": {
+    "name": "CreateRootClientCertificate",
+    "description": "Grants permission to create a root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleterootclientcertificate": {
+    "name": "DeleteRootClientCertificate",
+    "description": "Grants permission to delete root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeconsent": {
+    "name": "DescribeConsent",
+    "description": "Grants permission to retrieve information about consent agreement to BYOL minimum requirements",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "directoryaccessmanagement": {
+    "name": "DirectoryAccessManagement",
+    "description": "Grants permission to directory management actions while managing and provisioning workspaces",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "directoryid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettroubleshootingrecommendation": {
+    "name": "GetTroubleshootingRecommendation",
+    "description": "Grants permission to get troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invoketroubleshootinginvestigation": {
+    "name": "InvokeTroubleshootingInvestigation",
+    "description": "Grants permission to invoke troubleshooting investigation",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtroubleshootingrecommendations": {
+    "name": "ListTroubleshootingRecommendations",
+    "description": "Grants permission to list troubleshooting recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "workspaceid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateconsent": {
+    "name": "UpdateConsent",
+    "description": "Grants permission to update the consent agreement to BYOL minimum requirements",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updaterootclientcertificate": {
+    "name": "UpdateRootClientCertificate",
+    "description": "Grants permission to update a root client certificate",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "certificateid",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "acceptaccountlinkinvitation": {
     "name": "AcceptAccountLinkInvitation",
     "description": "Grants permission to accept invitations from other AWS accounts to share the same configuration for WorkSpaces BYOL",
@@ -85,9 +206,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "workspaces:UpdateRulesOfIpGroup"
-    ]
+    "dependentActions": []
   },
   "copyworkspaceimage": {
     "name": "CopyWorkspaceImage",
@@ -98,9 +217,7 @@
         "name": "workspaceimage",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "workspaces:DescribeWorkspaceImages"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -154,22 +271,6 @@
     ],
     "dependentActions": []
   },
-  "createrootclientcertificate": {
-    "name": "CreateRootClientCertificate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a root client certificate",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "certificateid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createstandbyworkspaces": {
     "name": "CreateStandbyWorkspaces",
     "description": "Grants permission to create one or more Standby WorkSpaces",
@@ -197,7 +298,7 @@
   "createtags": {
     "name": "CreateTags",
     "description": "Grants permission to create tags for WorkSpaces resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
@@ -232,9 +333,7 @@
         "name": "workspacebundle",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "workspaces:CreateTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "workspaceimage",
@@ -402,26 +501,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleterootclientcertificate": {
-    "name": "DeleteRootClientCertificate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete root client certificate",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "certificateid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletetags": {
     "name": "DeleteTags",
     "description": "Grants permission to delete tags from WorkSpaces resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
@@ -617,15 +700,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeconsent": {
-    "name": "DescribeConsent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve information about consent agreement to BYOL minimum requirements",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describecustomworkspaceimageimport": {
     "name": "DescribeCustomWorkspaceImageImport",
     "description": "Grants permission to retrieve information about WorkSpace BYOL image import task",
@@ -784,22 +858,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "directoryaccessmanagement": {
-    "name": "DirectoryAccessManagement",
-    "isPermissionOnly": true,
-    "description": "Grants permission to directory management actions while managing and provisioning workspaces",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "directoryid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "disassociateconnectionalias": {
     "name": "DisassociateConnectionAlias",
     "description": "Grants permission to disassociate connection aliases from directories",
@@ -867,22 +925,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "gettroubleshootingrecommendation": {
-    "name": "GetTroubleshootingRecommendation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get troubleshooting recommendations",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "workspaceid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "importclientbranding": {
     "name": "ImportClientBranding",
     "description": "Grants permission to import AWS WorkSpaces Client branding data within a directory",
@@ -912,25 +954,6 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DescribeImages",
-      "ec2:ModifyImageAttribute"
-    ]
-  },
-  "invoketroubleshootinginvestigation": {
-    "name": "InvokeTroubleshootingInvestigation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to invoke troubleshooting investigation",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "workspaceid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "listaccountlinks": {
@@ -949,22 +972,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listtroubleshootingrecommendations": {
-    "name": "ListTroubleshootingRecommendations",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list troubleshooting recommendations",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "workspaceid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "migrateworkspace": {
     "name": "MigrateWorkspace",
     "description": "Grants permission to migrate WorkSpaces",
@@ -1057,7 +1064,7 @@
   "modifyselfservicepermissions": {
     "name": "ModifySelfservicePermissions",
     "description": "Grants permission to modify the self-service WorkSpace management capabilities for your users",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "directoryid",
@@ -1228,9 +1235,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "workspaces:UpdateRulesOfIpGroup"
-    ]
+    "dependentActions": []
   },
   "startworkspaces": {
     "name": "StartWorkspaces",
@@ -1365,7 +1370,7 @@
   "updateconnectionaliaspermission": {
     "name": "UpdateConnectionAliasPermission",
     "description": "Grants permission to share or unshare connection aliases with other accounts",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "connectionalias",
@@ -1377,31 +1382,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateconsent": {
-    "name": "UpdateConsent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the consent agreement to BYOL minimum requirements",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "updaterootclientcertificate": {
-    "name": "UpdateRootClientCertificate",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update a root client certificate",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "certificateid",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updaterulesofipgroup": {
     "name": "UpdateRulesOfIpGroup",
     "description": "Grants permission to replace rules for IP access control groups",
@@ -1415,10 +1395,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "workspaces:AuthorizeIpRules",
-      "workspaces:RevokeIpRules"
-    ]
+    "dependentActions": []
   },
   "updateworkspacebundle": {
     "name": "UpdateWorkspaceBundle",
@@ -1444,7 +1421,7 @@
   "updateworkspaceimagepermission": {
     "name": "UpdateWorkspaceImagePermission",
     "description": "Grants permission to share or unshare WorkSpace images with other accounts by specifying whether other accounts have permission to copy the image",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "workspaceimage",

package/data/actions/xray.json

@@ -1,13 +1,36 @@
 {
   "batchgettracesummarybyid": {
     "name": "BatchGetTraceSummaryById",
-    "isPermissionOnly": true,
     "description": "Grants permission to retrieve metadata for a list of traces specified by ID",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdistincttracegraphs": {
+    "name": "GetDistinctTraceGraphs",
+    "description": "Grants permission to retrieve distinct service graphs for one or more specific trace IDs",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "link": {
+    "name": "Link",
+    "description": "Grants permission to share X-Ray resources with a monitoring account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putspansforindexing": {
+    "name": "PutSpansForIndexing",
+    "description": "Grants permission to upload spans to AWS X-Ray to be indexed",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgettraces": {
     "name": "BatchGetTraces",
     "description": "Grants permission to retrieve a list of traces specified by ID. Each trace is a collection of segment documents that originates from a single request. Use GetTraceSummaries to get a list of trace IDs",
@@ -104,15 +127,6 @@
     ],
     "dependentActions": []
   },
-  "getdistincttracegraphs": {
-    "name": "GetDistinctTraceGraphs",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve distinct service graphs for one or more specific trace IDs",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getencryptionconfig": {
     "name": "GetEncryptionConfig",
     "description": "Grants permission to retrieve the current encryption configuration for X-Ray data",
@@ -258,15 +272,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "link": {
-    "name": "Link",
-    "isPermissionOnly": true,
-    "description": "Grants permission to share X-Ray resources with a monitoring account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listresourcepolicies": {
     "name": "ListResourcePolicies",
     "description": "Grants permission to list resource policies",
@@ -307,7 +312,7 @@
   "putencryptionconfig": {
     "name": "PutEncryptionConfig",
     "description": "Grants permission to update the encryption configuration for X-Ray data",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -332,15 +337,6 @@
     ],
     "dependentActions": []
   },
-  "putspansforindexing": {
-    "name": "PutSpansForIndexing",
-    "isPermissionOnly": true,
-    "description": "Grants permission to upload spans to AWS X-Ray to be indexed",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "puttelemetryrecords": {
     "name": "PutTelemetryRecords",
     "description": "Grants permission to send AWS X-Ray daemon telemetry to the service",
@@ -370,7 +366,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an X-Ray resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "group",
@@ -386,15 +382,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an X-Ray resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "group",

package/data/categories/analytics.json

@@ -0,0 +1,41 @@
+{
+  "key": "analytics",
+  "name": "Analytics",
+  "services": [
+    "aoss",
+    "athena",
+    "cleanrooms",
+    "cloudsearch",
+    "databrew",
+    "dataexchange",
+    "datapipeline",
+    "datazone",
+    "dax",
+    "elasticmapreduce",
+    "emr-containers",
+    "emr-serverless",
+    "entityresolution",
+    "es",
+    "finspace",
+    "finspace-api",
+    "firehose",
+    "glue",
+    "kafka",
+    "kafka-cluster",
+    "kafkaconnect",
+    "kinesis",
+    "kinesisanalytics",
+    "kinesisvideo",
+    "lakeformation",
+    "neptune-graph",
+    "odb",
+    "opensearch",
+    "osis",
+    "quicksight",
+    "redshift",
+    "redshift-data",
+    "redshift-serverless",
+    "sdb",
+    "timestream-influxdb"
+  ]
+}

package/data/categories/application-integration.json

@@ -0,0 +1,20 @@
+{
+  "key": "application-integration",
+  "name": "Application integration",
+  "services": [
+    "airflow",
+    "airflow-serverless",
+    "app-integrations",
+    "appflow",
+    "b2bi",
+    "events",
+    "mq",
+    "pipes",
+    "scheduler",
+    "schemas",
+    "sns",
+    "sqs",
+    "states",
+    "swf"
+  ]
+}

package/data/categories/blockchain.json

@@ -0,0 +1,9 @@
+{
+  "key": "blockchain",
+  "name": "Blockchain",
+  "services": [
+    "managedblockchain",
+    "managedblockchain-query",
+    "qldb"
+  ]
+}

package/data/categories/business-applications.json

@@ -0,0 +1,32 @@
+{
+  "key": "business-applications",
+  "name": "Business applications",
+  "services": [
+    "a4b",
+    "appfabric",
+    "appstudio",
+    "awsconnector",
+    "cases",
+    "chime",
+    "connect",
+    "connect-campaigns",
+    "customer-verification",
+    "elemental-support-cases",
+    "health-agent",
+    "honeycode",
+    "mechanicalturk",
+    "mobiletargeting",
+    "one",
+    "profile",
+    "scn",
+    "ses",
+    "sms-voice",
+    "social-messaging",
+    "voiceid",
+    "wickr",
+    "wisdom",
+    "workdocs",
+    "workmail",
+    "workmailmessageflow"
+  ]
+}

package/data/categories/cloud-financial-management.json

@@ -0,0 +1,34 @@
+{
+  "key": "cloud-financial-management",
+  "name": "Cloud Financial Management",
+  "services": [
+    "aws-marketplace",
+    "aws-marketplace-management",
+    "aws-portal",
+    "bcm-dashboards",
+    "bcm-data-exports",
+    "bcm-pricing-calculator",
+    "bcm-recommended-actions",
+    "billing",
+    "billingconductor",
+    "budgets",
+    "ce",
+    "consolidatedbilling",
+    "cost-optimization-hub",
+    "cur",
+    "eventsbilltoaws",
+    "finops-agent",
+    "freetier",
+    "invoicing",
+    "mapcredits",
+    "marketplacecommerceanalytics",
+    "payment-cryptography",
+    "payments",
+    "pricing",
+    "pricingplanmanager",
+    "purchase-orders",
+    "savingsplans",
+    "tax",
+    "vendor-insights"
+  ]
+}

package/data/categories/compute.json

@@ -0,0 +1,23 @@
+{
+  "key": "compute",
+  "name": "Compute",
+  "services": [
+    "aco-automation",
+    "activate",
+    "apprunner",
+    "autoscaling",
+    "batch",
+    "ec2",
+    "ec2-instance-connect",
+    "ec2messages",
+    "elasticbeanstalk",
+    "evs",
+    "imagebuilder",
+    "lambda",
+    "lightsail",
+    "outposts",
+    "pcs",
+    "serverlessrepo",
+    "simspaceweaver"
+  ]
+}