@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/codeconnections.json

@@ -1,4 +1,133 @@
 {
+  "getconnectiontoken": {
+    "name": "GetConnectionToken",
+    "description": "Grants permission to get a Connection token to call provider actions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getindividualaccesstoken": {
+    "name": "GetIndividualAccessToken",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codeconnections:ProviderType"
+    ],
+    "dependentActions": []
+  },
+  "getinstallationurl": {
+    "name": "GetInstallationUrl",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codeconnections:ProviderType"
+    ],
+    "dependentActions": []
+  },
+  "listinstallationtargets": {
+    "name": "ListInstallationTargets",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "passconnection": {
+    "name": "PassConnection",
+    "description": "Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codeconnections:PassedToService"
+    ],
+    "dependentActions": []
+  },
+  "passrepository": {
+    "name": "PassRepository",
+    "description": "Grants permission to pass a repository link resource to an AWS service that accepts a RepositoryLinkId as input, such as codeconnections:CreateSyncConfiguration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "RepositoryLink",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codeconnections:PassedToService"
+    ],
+    "dependentActions": []
+  },
+  "registerappcode": {
+    "name": "RegisterAppCode",
+    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codeconnections:HostArn"
+    ],
+    "dependentActions": []
+  },
+  "startappregistrationhandshake": {
+    "name": "StartAppRegistrationHandshake",
+    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codeconnections:HostArn"
+    ],
+    "dependentActions": []
+  },
+  "startoauthhandshake": {
+    "name": "StartOAuthHandshake",
+    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "codeconnections:ProviderType"
+    ],
+    "dependentActions": []
+  },
+  "useconnection": {
+    "name": "UseConnection",
+    "description": "Grants permission to use a Connection resource to call provider actions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Connection",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "codeconnections:BranchName",
+      "codeconnections:FullRepositoryId",
+      "codeconnections:OwnerId",
+      "codeconnections:ProviderAction",
+      "codeconnections:ProviderPermissionsRequired",
+      "codeconnections:RepositoryName"
+    ],
+    "dependentActions": []
+  },
   "createconnection": {
     "name": "CreateConnection",
     "description": "Grants permission to create a Connection resource",
@@ -33,10 +162,7 @@
         "name": "Connection",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codeconnections:PassConnection",
-          "codeconnections:UseConnection"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -54,10 +180,7 @@
         "name": "RepositoryLink",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codeconnections:PassRepository",
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -133,22 +256,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getconnectiontoken": {
-    "name": "GetConnectionToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get a Connection token to call provider actions",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "gethost": {
     "name": "GetHost",
     "description": "Grants permission to get details about a host resource",
@@ -164,30 +271,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getindividualaccesstoken": {
-    "name": "GetIndividualAccessToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codeconnections:ProviderType"
-    ],
-    "dependentActions": [
-      "codeconnections:StartOAuthHandshake"
-    ]
-  },
-  "getinstallationurl": {
-    "name": "GetInstallationUrl",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codeconnections:ProviderType"
-    ],
-    "dependentActions": []
-  },
   "getrepositorylink": {
     "name": "GetRepositoryLink",
     "description": "Grants permission to describe a repository link",
@@ -271,18 +354,6 @@
     ],
     "dependentActions": []
   },
-  "listinstallationtargets": {
-    "name": "ListInstallationTargets",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": [
-      "codeconnections:GetIndividualAccessToken",
-      "codeconnections:StartOAuthHandshake"
-    ]
-  },
   "listrepositorylinks": {
     "name": "ListRepositoryLinks",
     "description": "Grants permission to list repository links",
@@ -334,79 +405,10 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "passconnection": {
-    "name": "PassConnection",
-    "isPermissionOnly": true,
-    "description": "Grants permission to pass a Connection resource to an AWS service that accepts a Connection ARN as input, such as codepipeline:CreatePipeline",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codeconnections:PassedToService"
-    ],
-    "dependentActions": []
-  },
-  "passrepository": {
-    "name": "PassRepository",
-    "isPermissionOnly": true,
-    "description": "Grants permission to pass a repository link resource to an AWS service that accepts a RepositoryLinkId as input, such as codeconnections:CreateSyncConfiguration",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "RepositoryLink",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codeconnections:PassedToService"
-    ],
-    "dependentActions": []
-  },
-  "registerappcode": {
-    "name": "RegisterAppCode",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codeconnections:HostArn"
-    ],
-    "dependentActions": []
-  },
-  "startappregistrationhandshake": {
-    "name": "StartAppRegistrationHandshake",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party server, such as a GitHub Enterprise Server instance, with a Host",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codeconnections:HostArn"
-    ],
-    "dependentActions": []
-  },
-  "startoauthhandshake": {
-    "name": "StartOAuthHandshake",
-    "isPermissionOnly": true,
-    "description": "Grants permission to associate a third party, such as a Bitbucket App installation, with a Connection",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "codeconnections:ProviderType"
-    ],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or modify the tags of the given resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Connection",
@@ -428,15 +430,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an AWS resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Connection",
@@ -471,12 +473,7 @@
         "name": "Connection",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codeconnections:GetIndividualAccessToken",
-          "codeconnections:GetInstallationUrl",
-          "codeconnections:ListInstallationTargets",
-          "codeconnections:StartOAuthHandshake"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -533,28 +530,5 @@
       "codeconnections:Branch"
     ],
     "dependentActions": []
-  },
-  "useconnection": {
-    "name": "UseConnection",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use a Connection resource to call provider actions",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Connection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "codeconnections:BranchName",
-      "codeconnections:FullRepositoryId",
-      "codeconnections:OwnerId",
-      "codeconnections:ProviderAction",
-      "codeconnections:ProviderPermissionsRequired",
-      "codeconnections:RepositoryName"
-    ],
-    "dependentActions": []
   }
 }

package/data/actions/codedeploy.json

@@ -1,8 +1,16 @@
 {
+  "createcloudformationdeployment": {
+    "name": "CreateCloudFormationDeployment",
+    "description": "Grants permission to create CloudFormation deployment to cooperate ochestration for a CloudFormation stack update",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addtagstoonpremisesinstances": {
     "name": "AddTagsToOnPremisesInstances",
     "description": "Grants permission to add tags to one or more on-premises instances",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "instance",
@@ -138,15 +146,6 @@
     ],
     "dependentActions": []
   },
-  "createcloudformationdeployment": {
-    "name": "CreateCloudFormationDeployment",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create CloudFormation deployment to cooperate ochestration for a CloudFormation stack update",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createdeployment": {
     "name": "CreateDeployment",
     "description": "Grants permission to create a deployment for an application associated with the IAM user",
@@ -546,7 +545,7 @@
   "removetagsfromonpremisesinstances": {
     "name": "RemoveTagsFromOnPremisesInstances",
     "description": "Grants permission to remove tags from one or more on-premises instances",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "instance",
@@ -577,7 +576,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate the list of tags in the input Tags parameter with the resource identified by the ResourceArn input parameter",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -601,7 +600,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to disassociate a resource from a list of tags. The resource is identified by the ResourceArn input parameter. The tags are identfied by the list of keys in the TagKeys input parameter",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",

package/data/actions/codeguru-profiler.json

@@ -50,8 +50,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -224,7 +224,7 @@
   "putpermission": {
     "name": "PutPermission",
     "description": "Grants permission to update the list of principals allowed for an action group in the resource policy associated with the specified Profiling Group",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "ProfilingGroup",
@@ -254,7 +254,7 @@
   "removepermission": {
     "name": "RemovePermission",
     "description": "Grants permission to remove the permission of specified Action Group from the resource policy associated with the specified Profiling Group",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "ProfilingGroup",
@@ -284,7 +284,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or overwrite tags to a Profiling Group",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ProfilingGroup",
@@ -294,15 +294,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a Profiling Group",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "ProfilingGroup",

package/data/actions/codeguru-reviewer.json

@@ -1,4 +1,28 @@
 {
+  "createconnectiontoken": {
+    "name": "CreateConnectionToken",
+    "description": "Grants permission to perform webbased oauth handshake for 3rd party providers",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmetricsdata": {
+    "name": "GetMetricsData",
+    "description": "Grants permission to view pull request metrics in console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listthirdpartyrepositories": {
+    "name": "ListThirdPartyRepositories",
+    "description": "Grants permission to list 3rd party providers repositories in console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associaterepository": {
     "name": "AssociateRepository",
     "description": "Grants permission to associates a repository with Amazon CodeGuru Reviewer",
@@ -8,19 +32,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "codecommit:GetRepository",
-      "codecommit:ListRepositories",
-      "codecommit:TagResource",
-      "codestar-connections:PassConnection",
-      "events:PutRule",
-      "events:PutTargets",
-      "iam:CreateServiceLinkedRole",
-      "s3:CreateBucket",
-      "s3:ListBucket",
-      "s3:PutBucketPolicy",
-      "s3:PutLifecycleConfiguration"
-    ]
+    "dependentActions": []
   },
   "createcodereview": {
     "name": "CreateCodeReview",
@@ -31,9 +43,7 @@
         "name": "association",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "s3:GetObject"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -41,15 +51,6 @@
     ],
     "dependentActions": []
   },
-  "createconnectiontoken": {
-    "name": "CreateConnectionToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to perform webbased oauth handshake for 3rd party providers",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describecodereview": {
     "name": "DescribeCodeReview",
     "description": "Grants permission to describe a code review",
@@ -110,11 +111,7 @@
         "name": "association",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "codecommit:UntagResource",
-          "events:DeleteRule",
-          "events:RemoveTargets"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -122,15 +119,6 @@
     ],
     "dependentActions": []
   },
-  "getmetricsdata": {
-    "name": "GetMetricsData",
-    "isPermissionOnly": true,
-    "description": "Grants permission to view pull request metrics in console",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listcodereviews": {
     "name": "ListCodeReviews",
     "description": "Grants permission to list summary of code reviews",
@@ -198,15 +186,6 @@
     ],
     "dependentActions": []
   },
-  "listthirdpartyrepositories": {
-    "name": "ListThirdPartyRepositories",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list 3rd party providers repositories in console",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putrecommendationfeedback": {
     "name": "PutRecommendationFeedback",
     "description": "Grants permission to put feedback for a recommendation on a code review",
@@ -227,7 +206,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to attach resource tags to an associated repository ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "association",
@@ -245,7 +224,7 @@
   "untagresource": {
     "name": "UnTagResource",
     "description": "Grants permission to disassociate resource tags from an associated repository ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "association",