@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/codecommit.json

@@ -1,8 +1,8 @@
 {
-  "associateapprovalruletemplatewithrepository": {
-    "name": "AssociateApprovalRuleTemplateWithRepository",
-    "description": "Grants permission to associate an approval rule template with a repository",
-    "accessLevel": "Write",
+  "batchgetpullrequests": {
+    "name": "BatchGetPullRequests",
+    "description": "Grants permission to return information about one or more pull requests in an AWS CodeCommit repository",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "repository",
@@ -14,10 +14,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchassociateapprovalruletemplatewithrepositories": {
-    "name": "BatchAssociateApprovalRuleTemplateWithRepositories",
-    "description": "Grants permission to associate an approval rule template with multiple repositories in a single operation",
-    "accessLevel": "Write",
+  "canceluploadarchive": {
+    "name": "CancelUploadArchive",
+    "description": "Grants permission to cancel the uploading of an archive to a pipeline in AWS CodePipeline",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "repository",
@@ -29,9 +29,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchdescribemergeconflicts": {
-    "name": "BatchDescribeMergeConflicts",
-    "description": "Grants permission to get information about multiple merge conflicts when attempting to merge two commits using either the three-way merge or the squash merge option",
+  "getcommithistory": {
+    "name": "GetCommitHistory",
+    "description": "Grants permission to get information about the history of commits in a repository",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -44,10 +44,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchdisassociateapprovalruletemplatefromrepositories": {
-    "name": "BatchDisassociateApprovalRuleTemplateFromRepositories",
-    "description": "Grants permission to remove the association between an approval rule template and multiple repositories in a single operation",
-    "accessLevel": "Write",
+  "getcommitsfrommergebase": {
+    "name": "GetCommitsFromMergeBase",
+    "description": "Grants permission to get information about the difference between commits in the context of a potential merge",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "repository",
@@ -59,9 +59,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchgetcommits": {
-    "name": "BatchGetCommits",
-    "description": "Grants permission to return information about one or more commits in an AWS CodeCommit repository",
+  "getobjectidentifier": {
+    "name": "GetObjectIdentifier",
+    "description": "Grants permission to resolve blobs, trees, and commits to their identifier",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -74,10 +74,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchgetpullrequests": {
-    "name": "BatchGetPullRequests",
-    "isPermissionOnly": true,
-    "description": "Grants permission to return information about one or more pull requests in an AWS CodeCommit repository",
+  "getreferences": {
+    "name": "GetReferences",
+    "description": "Grants permission to get details about references in an AWS CodeCommit repository; does not control Git reference actions",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -90,9 +89,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchgetrepositories": {
-    "name": "BatchGetRepositories",
-    "description": "Grants permission to get information about multiple repositories",
+  "gettree": {
+    "name": "GetTree",
+    "description": "Grants permission to view the contents of a specified tree in an AWS CodeCommit repository from the AWS CodeCommit console",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -105,10 +104,146 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "canceluploadarchive": {
-    "name": "CancelUploadArchive",
-    "isPermissionOnly": true,
-    "description": "Grants permission to cancel the uploading of an archive to a pipeline in AWS CodePipeline",
+  "getuploadarchivestatus": {
+    "name": "GetUploadArchiveStatus",
+    "description": "Grants permission to get status information about an archive upload to a pipeline in AWS CodePipeline",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gitpull": {
+    "name": "GitPull",
+    "description": "Grants permission to pull information from an AWS CodeCommit repository to a local repo",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gitpush": {
+    "name": "GitPush",
+    "description": "Grants permission to push information from a local repo to an AWS CodeCommit repository",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codecommit:References"
+    ],
+    "dependentActions": []
+  },
+  "uploadarchive": {
+    "name": "UploadArchive",
+    "description": "Grants permission to the service role for AWS CodePipeline to upload repository changes into a pipeline",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "associateapprovalruletemplatewithrepository": {
+    "name": "AssociateApprovalRuleTemplateWithRepository",
+    "description": "Grants permission to associate an approval rule template with a repository",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchassociateapprovalruletemplatewithrepositories": {
+    "name": "BatchAssociateApprovalRuleTemplateWithRepositories",
+    "description": "Grants permission to associate an approval rule template with multiple repositories in a single operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdescribemergeconflicts": {
+    "name": "BatchDescribeMergeConflicts",
+    "description": "Grants permission to get information about multiple merge conflicts when attempting to merge two commits using either the three-way merge or the squash merge option",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdisassociateapprovalruletemplatefromrepositories": {
+    "name": "BatchDisassociateApprovalRuleTemplateFromRepositories",
+    "description": "Grants permission to remove the association between an approval rule template and multiple repositories in a single operation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchgetcommits": {
+    "name": "BatchGetCommits",
+    "description": "Grants permission to return information about one or more commits in an AWS CodeCommit repository",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "repository",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchgetrepositories": {
+    "name": "BatchGetRepositories",
+    "description": "Grants permission to get information about multiple repositories",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -488,38 +623,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getcommithistory": {
-    "name": "GetCommitHistory",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the history of commits in a repository",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getcommitsfrommergebase": {
-    "name": "GetCommitsFromMergeBase",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the difference between commits in the context of a potential merge",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getdifferences": {
     "name": "GetDifferences",
     "description": "Grants permission to view information about the differences between valid commit specifiers such as a branch, tag, HEAD, commit ID, or other fully qualified reference",
@@ -612,22 +715,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getobjectidentifier": {
-    "name": "GetObjectIdentifier",
-    "isPermissionOnly": true,
-    "description": "Grants permission to resolve blobs, trees, and commits to their identifier",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getpullrequest": {
     "name": "GetPullRequest",
     "description": "Grants permission to get information about a pull request in a specified repository",
@@ -673,22 +760,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getreferences": {
-    "name": "GetReferences",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get details about references in an AWS CodeCommit repository; does not control Git reference actions",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getrepository": {
     "name": "GetRepository",
     "description": "Grants permission to get information about an AWS CodeCommit repository",
@@ -719,72 +790,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "gettree": {
-    "name": "GetTree",
-    "isPermissionOnly": true,
-    "description": "Grants permission to view the contents of a specified tree in an AWS CodeCommit repository from the AWS CodeCommit console",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getuploadarchivestatus": {
-    "name": "GetUploadArchiveStatus",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get status information about an archive upload to a pipeline in AWS CodePipeline",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "gitpull": {
-    "name": "GitPull",
-    "isPermissionOnly": true,
-    "description": "Grants permission to pull information from an AWS CodeCommit repository to a local repo",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "gitpush": {
-    "name": "GitPush",
-    "isPermissionOnly": true,
-    "description": "Grants permission to push information from a local repo to an AWS CodeCommit repository",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codecommit:References"
-    ],
-    "dependentActions": []
-  },
   "listapprovalruletemplates": {
     "name": "ListApprovalRuleTemplates",
     "description": "Grants permission to list all approval rule templates in an AWS Region for the AWS account",
@@ -1096,7 +1101,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to attach resource tags to a CodeCommit resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "repository",
@@ -1106,8 +1111,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
       "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
       "aws:TagKeys"
     ],
     "dependentActions": []
@@ -1130,7 +1135,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to disassociate resource tags from a CodeCommit resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "repository",
@@ -1140,8 +1145,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -1318,21 +1323,5 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
-  },
-  "uploadarchive": {
-    "name": "UploadArchive",
-    "isPermissionOnly": true,
-    "description": "Grants permission to the service role for AWS CodePipeline to upload repository changes into a pipeline",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "repository",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }