@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/apigateway.json

@@ -12,9 +12,9 @@
       }
     ],
     "conditionKeys": [
+      "apigateway:Request/CognitoUserPoolArn",
       "apigateway:Request/PortalDisplayName",
       "apigateway:Request/PortalDomainName",
-      "apigateway:Request/CognitoUserPoolArn",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -69,10 +69,10 @@
       }
     ],
     "conditionKeys": [
-      "apigateway:Request/RestApiId",
-      "apigateway:Request/Stage",
       "apigateway:Request/Method",
-      "apigateway:Request/ProductRestEndpointPageEndpointPrefix"
+      "apigateway:Request/ProductRestEndpointPageEndpointPrefix",
+      "apigateway:Request/RestApiId",
+      "apigateway:Request/Stage"
     ],
     "dependentActions": []
   },
@@ -85,16 +85,16 @@
         "name": "RoutingRule",
         "required": true,
         "conditionKeys": [
-          "apigateway:Request/Priority",
-          "apigateway:Request/ConditionBasePaths"
+          "apigateway:Request/ConditionBasePaths",
+          "apigateway:Request/Priority"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
+      "apigateway:Request/ConditionBasePaths",
       "apigateway:Request/Priority",
-      "apigateway:Request/ConditionBasePaths"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -299,7 +299,7 @@
   "deleteportalproductsharingpolicy": {
     "name": "DeletePortalProductSharingPolicy",
     "description": "Grants permission to delete a Portal Product Sharing Policy",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "PortalProduct",
@@ -356,16 +356,16 @@
         "name": "RoutingRule",
         "required": true,
         "conditionKeys": [
-          "apigateway:Resource/Priority",
-          "apigateway:Resource/ConditionBasePaths"
+          "apigateway:Resource/ConditionBasePaths",
+          "apigateway:Resource/Priority"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
+      "apigateway:Resource/ConditionBasePaths",
       "apigateway:Resource/Priority",
-      "apigateway:Resource/ConditionBasePaths"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -714,14 +714,14 @@
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "ProductPage",
-        "required": true,
+        "name": "PortalProduct",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "PortalProduct",
-        "required": false,
+        "name": "ProductPage",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -735,14 +735,14 @@
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "ProductRestEndpointPage",
-        "required": true,
+        "name": "PortalProduct",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "PortalProduct",
-        "required": false,
+        "name": "ProductRestEndpointPage",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -803,14 +803,14 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "ProductPage",
-        "required": true,
+        "name": "PortalProduct",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "PortalProduct",
-        "required": false,
+        "name": "ProductPage",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -824,14 +824,14 @@
     "accessLevel": "List",
     "resourceTypes": [
       {
-        "name": "ProductRestEndpointPage",
-        "required": true,
+        "name": "PortalProduct",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "PortalProduct",
-        "required": false,
+        "name": "ProductRestEndpointPage",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1237,7 +1237,7 @@
   "putportalproductsharingpolicy": {
     "name": "PutPortalProductSharingPolicy",
     "description": "Grants permission to put a Portal Product Sharing Policy",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "PortalProduct",
@@ -1262,9 +1262,9 @@
       }
     ],
     "conditionKeys": [
+      "apigateway:Request/CognitoUserPoolArn",
       "apigateway:Request/PortalDisplayName",
       "apigateway:Request/PortalDomainName",
-      "apigateway:Request/CognitoUserPoolArn",
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
@@ -1332,27 +1332,27 @@
         "name": "RoutingRule",
         "required": true,
         "conditionKeys": [
-          "apigateway:Request/Priority",
           "apigateway:Request/ConditionBasePaths",
-          "apigateway:Resource/Priority",
-          "apigateway:Resource/ConditionBasePaths"
+          "apigateway:Request/Priority",
+          "apigateway:Resource/ConditionBasePaths",
+          "apigateway:Resource/Priority"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}",
-      "apigateway:Request/Priority",
       "apigateway:Request/ConditionBasePaths",
+      "apigateway:Request/Priority",
+      "apigateway:Resource/ConditionBasePaths",
       "apigateway:Resource/Priority",
-      "apigateway:Resource/ConditionBasePaths"
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
   "addcertificatetodomain": {
     "name": "AddCertificateToDomain",
     "description": "Grants permission to add certificates for mutual TLS authentication to a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "DomainName",
@@ -1373,7 +1373,7 @@
   "createaccessassociation": {
     "name": "CreateAccessAssociation",
     "description": "Grants permission to create an access association from an access association source to a custom domain name for private APIs",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "PrivateDomainName",
@@ -1388,7 +1388,7 @@
   "rejectaccessassociation": {
     "name": "RejectAccessAssociation",
     "description": "Grants permission to reject an existing access association owned by another account to a custom domain name for private APIs",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "PrivateDomainName",
@@ -1403,7 +1403,7 @@
   "removecertificatefromdomain": {
     "name": "RemoveCertificateFromDomain",
     "description": "Grants permission to remove certificates for mutual TLS authentication from a domain name. This is an additional authorization control for managing the DomainName resource due to the sensitive nature of mTLS",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "DomainName",
@@ -1424,7 +1424,7 @@
   "setwebacl": {
     "name": "SetWebACL",
     "description": "Grants permission to set a WAF access control list (ACL). This is an additional authorization control for managing the Stage resource due to the sensitive nature of WebAcl's",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "Stage",
@@ -1445,7 +1445,7 @@
   "updatedomainnamemanagementpolicy": {
     "name": "UpdateDomainNameManagementPolicy",
     "description": "Grants permission to update the management policy of a custom domain name for private APIs",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "PrivateDomainName",
@@ -1460,7 +1460,7 @@
   "updatedomainnamepolicy": {
     "name": "UpdateDomainNamePolicy",
     "description": "Grants permission to update the invoke policy of a custom domain name for private APIs",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "DomainNames",
@@ -1481,7 +1481,7 @@
   "updaterestapipolicy": {
     "name": "UpdateRestApiPolicy",
     "description": "Grants permission to manage the IAM resource policy for an API. This is an additional authorization control for managing an API due to the sensitive nature of the resource policy",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "RestApi",

package/data/actions/app-integrations.json

@@ -1,18 +1,14 @@
 {
-  "createapplication": {
-    "name": "CreateApplication",
-    "description": "Grants permission to create a new Application",
+  "createapplicationassociation": {
+    "name": "CreateApplicationAssociation",
+    "description": "Grants permission to create an ApplicationAssociation",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PutRolePolicy"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -21,14 +17,13 @@
     ],
     "dependentActions": []
   },
-  "createapplicationassociation": {
-    "name": "CreateApplicationAssociation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an ApplicationAssociation",
+  "createeventintegrationassociation": {
+    "name": "CreateEventIntegrationAssociation",
+    "description": "Grants permission to create an EventIntegrationAssociation",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "application",
+        "name": "event-integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -40,70 +35,43 @@
     ],
     "dependentActions": []
   },
-  "createdataintegration": {
-    "name": "CreateDataIntegration",
-    "description": "Grants permission to create a new DataIntegration",
+  "deleteapplicationassociation": {
+    "name": "DeleteApplicationAssociation",
+    "description": "Grants permission to delete an ApplicationAssociation",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "data-integration",
+        "name": "application-association",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "appflow:DeleteFlow",
-          "appflow:DescribeConnectorProfiles",
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PutRolePolicy",
-          "kms:CreateGrant",
-          "profile:GetDomain",
-          "profile:GetProfileObjectType",
-          "s3:GetBucketNotification",
-          "s3:GetEncryptionConfiguration",
-          "s3:PutBucketNotification"
-        ]
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "createdataintegrationassociation": {
-    "name": "CreateDataIntegrationAssociation",
-    "description": "Grants permission to create a DataIntegrationAssociation",
+  "deletedataintegrationassociation": {
+    "name": "DeleteDataIntegrationAssociation",
+    "description": "Grants permission to delete a DataIntegrationAssociation",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "data-integration",
+        "name": "data-integration-association",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "appflow:CreateFlow",
-          "appflow:DeleteFlow",
-          "appflow:DescribeConnectorEntity",
-          "appflow:DescribeConnectorProfiles",
-          "appflow:TagResource",
-          "appflow:UseConnectorProfile",
-          "profile:CreateSnapshot",
-          "profile:GetSnapshot"
-        ]
+        "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "createdataintegrationschedule": {
-    "name": "CreateDataIntegrationSchedule",
-    "description": "Grants permission to create a data integration schedule",
+  "deleteeventintegrationassociation": {
+    "name": "DeleteEventIntegrationAssociation",
+    "description": "Grants permission to delete an EventIntegrationAssociation",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "data-integration",
+        "name": "event-integration-association",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -112,20 +80,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createeventintegration": {
-    "name": "CreateEventIntegration",
-    "description": "Grants permission to create a new EventIntegration",
+  "createapplication": {
+    "name": "CreateApplication",
+    "description": "Grants permission to create a new Application",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "event-integration",
+        "name": "application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:AttachRolePolicy",
-          "iam:CreateServiceLinkedRole",
-          "iam:PutRolePolicy"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -134,20 +98,16 @@
     ],
     "dependentActions": []
   },
-  "createeventintegrationassociation": {
-    "name": "CreateEventIntegrationAssociation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an EventIntegrationAssociation",
+  "createdataintegration": {
+    "name": "CreateDataIntegration",
+    "description": "Grants permission to create a new DataIntegration",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "event-integration",
+        "name": "data-integration",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "events:PutRule",
-          "events:PutTargets"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -156,31 +116,31 @@
     ],
     "dependentActions": []
   },
-  "deleteapplication": {
-    "name": "DeleteApplication",
-    "description": "Grants permission to delete an Application",
+  "createdataintegrationassociation": {
+    "name": "CreateDataIntegrationAssociation",
+    "description": "Grants permission to create a DataIntegrationAssociation",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "application",
+        "name": "data-integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
-  "deleteapplicationassociation": {
-    "name": "DeleteApplicationAssociation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete an ApplicationAssociation",
+  "createdataintegrationschedule": {
+    "name": "CreateDataIntegrationSchedule",
+    "description": "Grants permission to create a data integration schedule",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "application-association",
+        "name": "data-integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -189,54 +149,48 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletedataintegration": {
-    "name": "DeleteDataIntegration",
-    "description": "Grants permission to delete a DataIntegration",
+  "createeventintegration": {
+    "name": "CreateEventIntegration",
+    "description": "Grants permission to create a new EventIntegration",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "data-integration",
+        "name": "event-integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
-  "deletedataintegrationassociation": {
-    "name": "DeleteDataIntegrationAssociation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a DataIntegrationAssociation",
+  "deleteapplication": {
+    "name": "DeleteApplication",
+    "description": "Grants permission to delete an Application",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "data-integration-association",
+        "name": "application",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "appflow:CreateFlow",
-      "appflow:DeleteFlow",
-      "appflow:DescribeConnectorEntity",
-      "appflow:DescribeConnectorProfiles",
-      "appflow:StopFlow",
-      "appflow:TagResource",
-      "appflow:UseConnectorProfile"
-    ]
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   },
-  "deleteeventintegration": {
-    "name": "DeleteEventIntegration",
-    "description": "Grants permission to delete an EventIntegration",
+  "deletedataintegration": {
+    "name": "DeleteDataIntegration",
+    "description": "Grants permission to delete a DataIntegration",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "event-integration",
+        "name": "data-integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -247,25 +201,22 @@
     ],
     "dependentActions": []
   },
-  "deleteeventintegrationassociation": {
-    "name": "DeleteEventIntegrationAssociation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete an EventIntegrationAssociation",
+  "deleteeventintegration": {
+    "name": "DeleteEventIntegration",
+    "description": "Grants permission to delete an EventIntegration",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "event-integration-association",
+        "name": "event-integration",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "events:DeleteRule",
-      "events:ListTargetsByRule",
-      "events:RemoveTargets"
-    ]
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   },
   "getapplication": {
     "name": "GetApplication",
@@ -480,15 +431,12 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "profile:CreateSegmentSnapshot",
-      "profile:CreateSnapshot"
-    ]
+    "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an Amazon AppIntegration resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -528,16 +476,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag an Amazon AppIntegration resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -577,8 +525,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -625,10 +573,7 @@
         "name": "data-integration-association",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "profile:CreateSnapshot",
-          "profile:GetSnapshot"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [