@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/cloudshell.json

@@ -1,7 +1,6 @@
 {
   "approvecommand": {
     "name": "ApproveCommand",
-    "isPermissionOnly": true,
     "description": "Grants permission to approve a command sent by another AWS service",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -17,7 +16,6 @@
   },
   "createenvironment": {
     "name": "CreateEnvironment",
-    "isPermissionOnly": true,
     "description": "Grants permissions to create a CloudShell environment",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -30,7 +28,6 @@
   },
   "createsession": {
     "name": "CreateSession",
-    "isPermissionOnly": true,
     "description": "Grants permissions to connect to a CloudShell environment from the AWS Management Console",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -46,7 +43,6 @@
   },
   "deleteenvironment": {
     "name": "DeleteEnvironment",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a CloudShell environment",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -62,7 +58,6 @@
   },
   "describeenvironments": {
     "name": "DescribeEnvironments",
-    "isPermissionOnly": true,
     "description": "Grants permission to return descriptions of existing user's environments",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -71,7 +66,6 @@
   },
   "getenvironmentstatus": {
     "name": "GetEnvironmentStatus",
-    "isPermissionOnly": true,
     "description": "Grants permission to read a CloudShell environment status",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -87,7 +81,6 @@
   },
   "getfiledownloadurls": {
     "name": "GetFileDownloadUrls",
-    "isPermissionOnly": true,
     "description": "Grants permissions to download files from a CloudShell environment",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -103,7 +96,6 @@
   },
   "getfileuploadurls": {
     "name": "GetFileUploadUrls",
-    "isPermissionOnly": true,
     "description": "Grants permissions to upload files to a CloudShell environment",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -119,7 +111,6 @@
   },
   "putcredentials": {
     "name": "PutCredentials",
-    "isPermissionOnly": true,
     "description": "Grants permissions to forward console credentials to the environment",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -135,7 +126,6 @@
   },
   "startenvironment": {
     "name": "StartEnvironment",
-    "isPermissionOnly": true,
     "description": "Grants permission to start a stopped CloudShell environment",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -151,7 +141,6 @@
   },
   "stopenvironment": {
     "name": "StopEnvironment",
-    "isPermissionOnly": true,
     "description": "Grants permission to stop a running CloudShell environment",
     "accessLevel": "Write",
     "resourceTypes": [

package/data/actions/cloudtrail.json

@@ -1,8 +1,91 @@
 {
+  "createservicelinkedchannel": {
+    "name": "CreateServiceLinkedChannel",
+    "description": "Grants permission to create a service-linked channel that specifies the settings for delivery of log data to an AWS service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteservicelinkedchannel": {
+    "name": "DeleteServiceLinkedChannel",
+    "description": "Grants permission to delete a service-linked channel",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "generatequeryresultssummary": {
+    "name": "GenerateQueryResultsSummary",
+    "description": "Grants permission to generate a results summary for specified queries using the CloudTrail natural language generator",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "eventdatastore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getservicelinkedchannel": {
+    "name": "GetServiceLinkedChannel",
+    "description": "Grants permission to list settings for the service-linked channel",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listservicelinkedchannels": {
+    "name": "ListServiceLinkedChannels",
+    "description": "Grants permission to list service-linked channels associated with the current region for a specified account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateservicelinkedchannel": {
+    "name": "UpdateServiceLinkedChannel",
+    "description": "Grants permission to update the service-linked channel settings for delivery of log data to an AWS service",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addtags": {
     "name": "AddTags",
     "description": "Grants permission to add one or more tags to a trail, event data store, channel or dashboard, up to a limit of 50",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channel",
@@ -59,9 +142,7 @@
         "name": "channel",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "cloudtrail:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "eventdatastore",
@@ -85,11 +166,7 @@
         "name": "dashboard",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "cloudtrail:AddTags",
-          "cloudtrail:StartDashboardRefresh",
-          "cloudtrail:StartQuery"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -107,14 +184,7 @@
         "name": "eventdatastore",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "cloudtrail:AddTags",
-          "iam:CreateServiceLinkedRole",
-          "iam:GetRole",
-          "kms:Decrypt",
-          "kms:GenerateDataKey",
-          "organizations:ListAWSServiceAccessForOrganization"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -123,22 +193,6 @@
     ],
     "dependentActions": []
   },
-  "createservicelinkedchannel": {
-    "name": "CreateServiceLinkedChannel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a service-linked channel that specifies the settings for delivery of log data to an AWS service",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "channel",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createtrail": {
     "name": "CreateTrail",
     "description": "Grants permission to create a trail that specifies the settings for delivery of log data to an Amazon S3 bucket",
@@ -148,12 +202,7 @@
         "name": "trail",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "cloudtrail:AddTags",
-          "iam:CreateServiceLinkedRole",
-          "iam:GetRole",
-          "organizations:ListAWSServiceAccessForOrganization"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -234,22 +283,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteservicelinkedchannel": {
-    "name": "DeleteServiceLinkedChannel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a service-linked channel",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "channel",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletetrail": {
     "name": "DeleteTrail",
     "description": "Grants permission to delete a trail",
@@ -271,10 +304,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DeregisterDelegatedAdministrator",
-      "organizations:ListAWSServiceAccessForOrganization"
-    ]
+    "dependentActions": []
   },
   "describequery": {
     "name": "DescribeQuery",
@@ -312,13 +342,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "glue:DeleteDatabase",
-      "glue:DeleteTable",
-      "glue:PassConnection",
-      "lakeformation:DeregisterResource",
-      "lakeformation:RegisterResource"
-    ]
+    "dependentActions": []
   },
   "enablefederation": {
     "name": "EnableFederation",
@@ -333,14 +357,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "glue:CreateDatabase",
-      "glue:CreateTable",
-      "iam:GetRole",
-      "iam:PassRole",
-      "lakeformation:DeregisterResource",
-      "lakeformation:RegisterResource"
-    ]
+    "dependentActions": []
   },
   "generatequery": {
     "name": "GenerateQuery",
@@ -357,26 +374,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "generatequeryresultssummary": {
-    "name": "GenerateQueryResultsSummary",
-    "isPermissionOnly": true,
-    "description": "Grants permission to generate a results summary for specified queries using the CloudTrail natural language generator",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "eventdatastore",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "cloudtrail:GetQueryResults",
-      "kms:Decrypt",
-      "kms:GenerateDataKey"
-    ]
-  },
   "getchannel": {
     "name": "GetChannel",
     "description": "Grants permission to return information about a specific channel",
@@ -456,10 +453,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt",
-      "kms:GenerateDataKey"
-    ]
+    "dependentActions": []
   },
   "geteventselectors": {
     "name": "GetEventSelectors",
@@ -518,10 +512,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt",
-      "kms:GenerateDataKey"
-    ]
+    "dependentActions": []
   },
   "getresourcepolicy": {
     "name": "GetResourcePolicy",
@@ -550,22 +541,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getservicelinkedchannel": {
-    "name": "GetServiceLinkedChannel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list settings for the service-linked channel",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "channel",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "gettrail": {
     "name": "GetTrail",
     "description": "Grants permission to list settings for the trail",
@@ -674,15 +649,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listservicelinkedchannels": {
-    "name": "ListServiceLinkedChannels",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list service-linked channels associated with the current region for a specified account",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listtags": {
     "name": "ListTags",
     "description": "Grants permission to list the tags for trails, event data stores, channels or dashboards in the current region",
@@ -741,10 +707,7 @@
         "name": "eventdatastore",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole",
-          "iam:GetRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "trail",
@@ -825,17 +788,12 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:GetRole",
-      "organizations:ListAWSServiceAccessForOrganization",
-      "organizations:RegisterDelegatedAdministrator"
-    ]
+    "dependentActions": []
   },
   "removetags": {
     "name": "RemoveTags",
     "description": "Grants permission to remove tags from a trail, event data store, channel or dashboard",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channel",
@@ -903,9 +861,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "cloudtrail:StartQuery"
-    ]
+    "dependentActions": []
   },
   "starteventdatastoreingestion": {
     "name": "StartEventDataStoreIngestion",
@@ -958,10 +914,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "kms:Decrypt",
-      "kms:GenerateDataKey"
-    ]
+    "dependentActions": []
   },
   "stopeventdatastoreingestion": {
     "name": "StopEventDataStoreIngestion",
@@ -1029,10 +982,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "cloudtrail:StartDashboardRefresh",
-      "cloudtrail:StartQuery"
-    ]
+    "dependentActions": []
   },
   "updateeventdatastore": {
     "name": "UpdateEventDataStore",
@@ -1047,28 +997,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:GetRole",
-      "kms:Decrypt",
-      "kms:GenerateDataKey",
-      "organizations:ListAWSServiceAccessForOrganization"
-    ]
-  },
-  "updateservicelinkedchannel": {
-    "name": "UpdateServiceLinkedChannel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the service-linked channel settings for delivery of log data to an AWS service",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "channel",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "updatetrail": {
@@ -1084,10 +1012,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "iam:GetRole",
-      "organizations:ListAWSServiceAccessForOrganization"
-    ]
+    "dependentActions": []
   }
 }