@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/budgets.json

@@ -8,15 +8,13 @@
         "name": "budgetAction",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -137,14 +135,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to apply resource tags to a budget or budget action. Also needed to create a budget or budget action with tags",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "budget",
@@ -160,15 +156,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove resource tags from a budget or budget action",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "budget",
@@ -201,9 +197,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "viewbudget": {
     "name": "ViewBudget",
@@ -218,8 +212,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "billing:GetBillingViewData"
-    ]
+    "dependentActions": []
   }
 }

package/data/actions/bugbust.json

@@ -1,150 +1,136 @@
 {
   "createevent": {
     "name": "CreateEvent",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a BugBust event",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "evaluateprofilinggroups": {
     "name": "EvaluateProfilingGroups",
-    "isPermissionOnly": true,
     "description": "Grants permission to evaluate checked-in profiling groups",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "getevent": {
     "name": "GetEvent",
-    "isPermissionOnly": true,
     "description": "Grants permission to view customer details about an event",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "getjoineventstatus": {
     "name": "GetJoinEventStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the status of a BugBust player's attempt to join a BugBust event",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "joinevent": {
     "name": "JoinEvent",
-    "isPermissionOnly": true,
     "description": "Grants permission to join an event",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listbugs": {
     "name": "ListBugs",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the bugs that were imported into an event for players to work on",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
-        "dependentActions": [
-          "codeguru-reviewer:DescribeCodeReview",
-          "codeguru-reviewer:ListRecommendations"
-        ]
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listeventparticipants": {
     "name": "ListEventParticipants",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the participants of an event",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listeventscores": {
     "name": "ListEventScores",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the scores of an event's players",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listevents": {
     "name": "ListEvents",
-    "isPermissionOnly": true,
     "description": "Grants permission to List BugBust events",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -155,160 +141,142 @@
   },
   "listprofilinggroups": {
     "name": "ListProfilingGroups",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the profiling groups that were imported into an event for players to work on",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listpullrequests": {
     "name": "ListPullRequests",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the pull requests used by players to submit fixes to their claimed bugs in an event",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to lists tag for a Bugbust resource",
     "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to tag a Bugbust resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to untag a Bugbust resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:ResourceTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updateevent": {
     "name": "UpdateEvent",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a BugBust event",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
-        "dependentActions": [
-          "codeguru-profiler:DescribeProfilingGroup",
-          "codeguru-profiler:ListProfilingGroups",
-          "codeguru-reviewer:DescribeCodeReview",
-          "codeguru-reviewer:ListCodeReviews",
-          "codeguru-reviewer:ListRecommendations",
-          "codeguru-reviewer:TagResource",
-          "codeguru-reviewer:UnTagResource"
-        ]
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updateworkitem": {
     "name": "UpdateWorkItem",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a work item as claimed or unclaimed (bug or profiling group)",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
-        "dependentActions": [
-          "codeguru-reviewer:ListRecommendations"
-        ]
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updateworkitemadmin": {
     "name": "UpdateWorkItemAdmin",
-    "isPermissionOnly": true,
     "description": "Grants permission to update an event's work item (bug or profiling group)",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "Event",
         "required": true,
-        "conditionKeys": [],
-        "dependentActions": [
-          "codeguru-reviewer:ListRecommendations"
-        ]
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   }
 }

package/data/actions/cases.json

@@ -672,7 +672,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add the specified tags to the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Case",
@@ -726,7 +726,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the specified tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Case",

package/data/actions/cassandra.json

@@ -283,7 +283,7 @@
   "tagmultiregionresource": {
     "name": "TagMultiRegionResource",
     "description": "Grants permission to tag a multiregion keyspace or table",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "keyspace",
@@ -307,7 +307,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a keyspace, table, or stream",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "keyspace",
@@ -337,7 +337,7 @@
   "untagmultiregionresource": {
     "name": "UnTagMultiRegionResource",
     "description": "Grants permission to untag a multiregion keyspace or table",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "keyspace",
@@ -360,7 +360,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a keyspace, table or stream",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "keyspace",