@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/chime.json

@@ -1,4 +1,42 @@
 {
+  "associatevoiceconnectorconnect": {
+    "name": "AssociateVoiceConnectorConnect",
+    "description": "Grants permission to associate the specified Amazon Connect instance with an Amazon Chime Voice Connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createconnectanalyticsconnector": {
+    "name": "CreateConnectAnalyticsConnector",
+    "description": "Grants permission to create an Amazon Connect Analytics Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createconnectcalltransferconnector": {
+    "name": "CreateConnectCallTransferConnector",
+    "description": "Grants permission to create an Amazon Connect Call Transfer Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "disassociatevoiceconnectorconnect": {
+    "name": "DisassociateVoiceConnectorConnect",
+    "description": "Grants permission to disassociate the Amazon Connect instance from the specified Amazon Chime Voice Connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "acceptdelegate": {
     "name": "AcceptDelegate",
     "description": "Grants permission to accept the delegate invitation to share management of an Amazon Chime account with another AWS Account",
@@ -103,15 +141,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "associatevoiceconnectorconnect": {
-    "name": "AssociateVoiceConnectorConnect",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate the specified Amazon Connect instance with an Amazon Chime Voice Connector",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "authorizedirectory": {
     "name": "AuthorizeDirectory",
     "description": "Grants permission to authorize an Active Directory for your Amazon Chime Enterprise account",
@@ -261,9 +290,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "ds:ConnectDirectory"
-    ]
+    "dependentActions": []
   },
   "createaccount": {
     "name": "CreateAccount",
@@ -287,8 +314,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -325,8 +352,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -336,8 +363,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -370,10 +397,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:CreateBucket",
-      "s3:ListAllMyBuckets"
-    ]
+    "dependentActions": []
   },
   "createchannel": {
     "name": "CreateChannel",
@@ -394,8 +418,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -439,8 +463,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -498,46 +522,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createconnectanalyticsconnector": {
-    "name": "CreateConnectAnalyticsConnector",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an Amazon Connect Analytics Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
-    "dependentActions": [
-      "chime:CreateVoiceConnector"
-    ]
-  },
-  "createconnectcalltransferconnector": {
-    "name": "CreateConnectCallTransferConnector",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an Amazon Connect Call Transfer Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
-    "dependentActions": [
-      "chime:CreateVoiceConnector"
-    ]
-  },
   "createmediacapturepipeline": {
     "name": "CreateMediaCapturePipeline",
     "description": "Grants permission to create a media capture pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "s3:GetBucketPolicy"
-    ]
+    "dependentActions": []
   },
   "createmediaconcatenationpipeline": {
     "name": "CreateMediaConcatenationPipeline",
@@ -545,12 +539,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "s3:GetBucketPolicy"
-    ]
+    "dependentActions": []
   },
   "createmediainsightspipeline": {
     "name": "CreateMediaInsightsPipeline",
@@ -561,15 +553,12 @@
         "name": "media-insights-pipeline-configuration",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "chime:TagResource",
-          "kinesisvideo:DescribeStream"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -579,15 +568,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "chime:TagResource",
-      "iam:PassRole",
-      "kinesis:DescribeStream",
-      "s3:ListBucket"
-    ]
+    "dependentActions": []
   },
   "createmedialiveconnectorpipeline": {
     "name": "CreateMediaLiveConnectorPipeline",
@@ -595,8 +579,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -606,15 +590,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "kinesis:DescribeStream",
-      "kinesisvideo:CreateStream",
-      "kinesisvideo:GetDataEndpoint",
-      "kinesisvideo:ListStreams"
-    ]
+    "dependentActions": []
   },
   "createmediastreampipeline": {
     "name": "CreateMediaStreamPipeline",
@@ -625,16 +604,12 @@
         "name": "media-pipeline-kinesis-video-stream-pool",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "kinesisvideo:DescribeStream",
-          "kinesisvideo:GetDataEndpoint",
-          "kinesisvideo:PutMedia"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -720,8 +695,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -769,13 +744,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "chime:CreateConnectAnalyticsConnector",
-      "chime:CreateConnectCallTransferConnector"
-    ]
+    "dependentActions": []
   },
   "createvoiceconnectorgroup": {
     "name": "CreateVoiceConnectorGroup",
@@ -806,14 +778,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "chime:TagResource",
-      "kms:CreateGrant",
-      "kms:DescribeKey"
-    ]
+    "dependentActions": []
   },
   "deleteaccount": {
     "name": "DeleteAccount",
@@ -947,9 +915,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:DeleteBucket"
-    ]
+    "dependentActions": []
   },
   "deletechannel": {
     "name": "DeleteChannel",
@@ -1161,9 +1127,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "chime:ListVoiceConnectors"
-    ]
+    "dependentActions": []
   },
   "deletemediapipeline": {
     "name": "DeleteMediaPipeline",
@@ -1300,12 +1264,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "logs:CreateLogDelivery",
-      "logs:DeleteLogDelivery",
-      "logs:GetLogDelivery",
-      "logs:ListLogDeliveries"
-    ]
+    "dependentActions": []
   },
   "deletevoiceconnectoremergencycallingconfiguration": {
     "name": "DeleteVoiceConnectorEmergencyCallingConfiguration",
@@ -1801,15 +1760,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "disassociatevoiceconnectorconnect": {
-    "name": "DisassociateVoiceConnectorConnect",
-    "isPermissionOnly": true,
-    "description": "Grants permission to disassociate the Amazon Connect instance from the specified Amazon Chime Voice Connector",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "disconnectdirectory": {
     "name": "DisconnectDirectory",
     "description": "Grants permission to disconnect the Active Directory from your Amazon Chime Enterprise account",
@@ -1909,13 +1859,7 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:GetBucketAcl",
-      "s3:GetBucketLocation",
-      "s3:GetBucketLogging",
-      "s3:GetBucketVersioning",
-      "s3:GetBucketWebsite"
-    ]
+    "dependentActions": []
   },
   "getchannelmembershippreferences": {
     "name": "GetChannelMembershipPreferences",
@@ -2678,10 +2622,7 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:ListAllMyBuckets",
-      "s3:ListBucket"
-    ]
+    "dependentActions": []
   },
   "listcallingregions": {
     "name": "ListCallingRegions",
@@ -3448,14 +3389,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "logs:CreateLogDelivery",
-      "logs:CreateLogGroup",
-      "logs:DeleteLogDelivery",
-      "logs:DescribeLogGroups",
-      "logs:GetLogDelivery",
-      "logs:ListLogDeliveries"
-    ]
+    "dependentActions": []
   },
   "putvoiceconnectororigination": {
     "name": "PutVoiceConnectorOrigination",
@@ -3493,16 +3427,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "voice-connector",
-        "required": true,
+        "name": "media-insights-pipeline-configuration",
+        "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "chime:GetMediaInsightsPipelineConfiguration"
-        ]
+        "dependentActions": []
       },
       {
-        "name": "media-insights-pipeline-configuration",
-        "required": false,
+        "name": "voice-connector",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -3604,9 +3536,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "mobiletargeting:GetApp"
-    ]
+    "dependentActions": []
   },
   "renameaccount": {
     "name": "RenameAccount",
@@ -3839,7 +3769,7 @@
   "tagattendee": {
     "name": "TagAttendee",
     "description": "Grants permission to apply the specified tags to the specified Amazon Chime SDK attendee",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "meeting",
@@ -3854,7 +3784,7 @@
   "tagmeeting": {
     "name": "TagMeeting",
     "description": "Grants permission to apply the specified tags to the specified Amazon Chime SDK meeting",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "meeting",
@@ -3864,16 +3794,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to apply the specified tags to the specified resource (tag-based access controls are only supported on *-chime.<region>.amazonaws.com endpoints)",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "app-instance",
@@ -3949,9 +3879,9 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -3966,7 +3896,7 @@
   "untagattendee": {
     "name": "UntagAttendee",
     "description": "Grants permission to untag the specified tags from the specified Amazon Chime SDK attendee",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "meeting",
@@ -3981,7 +3911,7 @@
   "untagmeeting": {
     "name": "UntagMeeting",
     "description": "Grants permission to untag the specified tags from the specified Amazon Chime SDK meeting",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "meeting",
@@ -3996,7 +3926,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag the specified tags from the specified resource (tag-based access controls are only supported on *-chime.<region>.amazonaws.com endpoints)",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "app-instance",
@@ -4197,11 +4127,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:CreateBucket",
-      "s3:DeleteBucket",
-      "s3:ListAllMyBuckets"
-    ]
+    "dependentActions": []
   },
   "updatechannel": {
     "name": "UpdateChannel",
@@ -4320,12 +4246,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "chime:ListVoiceConnectors",
-      "iam:PassRole",
-      "kinesis:DescribeStream",
-      "s3:ListBucket"
-    ]
+    "dependentActions": []
   },
   "updatemediainsightspipelinestatus": {
     "name": "UpdateMediaInsightsPipelineStatus",

package/data/actions/cleanrooms-ml.json

@@ -751,8 +751,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -800,7 +800,7 @@
   "putconfiguredaudiencemodelpolicy": {
     "name": "PutConfiguredAudienceModelPolicy",
     "description": "Grants permission to create or update the resource policy for a configured audience model",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "configuredaudiencemodel",
@@ -911,7 +911,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a specific resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ConfiguredModelAlgorithm",
@@ -969,16 +969,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UnTagResource",
     "description": "Grants permission to untag a specific resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ConfiguredModelAlgorithm",
@@ -1036,8 +1036,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -1047,14 +1047,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "configuredaudiencemodel",
-        "required": true,
+        "name": "audiencemodel",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "audiencemodel",
-        "required": false,
+        "name": "configuredaudiencemodel",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }