@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/detective.json

@@ -1,4 +1,102 @@
 {
+  "getfreetrialeligibility": {
+    "name": "GetFreeTrialEligibility",
+    "description": "Grants permission to retrieve a behavior graph's eligibility for a free trial period",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Graph",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getgraphingeststate": {
+    "name": "GetGraphIngestState",
+    "description": "Grants permission to retrieve the data ingestion state of a behavior graph",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Graph",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpricinginformation": {
+    "name": "GetPricingInformation",
+    "description": "Grants permission to retrieve information about Amazon Detective's pricing",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getusageinformation": {
+    "name": "GetUsageInformation",
+    "description": "Grants permission to list usage information of a behavior graph",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Graph",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeassistant": {
+    "name": "InvokeAssistant",
+    "description": "Grants permission to invoke Detective's Assistant",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Graph",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listhighdegreeentities": {
+    "name": "ListHighDegreeEntities",
+    "description": "Grants permission to retrieve high volume entities whose relationships cannot be stored by Detective",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Graph",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchgraph": {
+    "name": "SearchGraph",
+    "description": "Grants permission to search the data stored in a behavior graph",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Graph",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "acceptinvitation": {
     "name": "AcceptInvitation",
     "description": "Grants permission to accept an invitation to become a member of a behavior graph",
@@ -43,13 +141,11 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "detective:TagResource"
-    ]
+    "dependentActions": []
   },
   "createmembers": {
     "name": "CreateMembers",
@@ -109,9 +205,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "disableorganizationadminaccount": {
     "name": "DisableOrganizationAdminAccount",
@@ -119,9 +213,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "disassociatemembership": {
     "name": "DisassociateMembership",
@@ -144,43 +236,6 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "organizations:DescribeOrganization",
-      "organizations:EnableAWSServiceAccess",
-      "organizations:RegisterDelegatedAdministrator"
-    ]
-  },
-  "getfreetrialeligibility": {
-    "name": "GetFreeTrialEligibility",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve a behavior graph's eligibility for a free trial period",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Graph",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getgraphingeststate": {
-    "name": "GetGraphIngestState",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve the data ingestion state of a behavior graph",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Graph",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
     "dependentActions": []
   },
   "getinvestigation": {
@@ -213,47 +268,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getpricinginformation": {
-    "name": "GetPricingInformation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve information about Amazon Detective's pricing",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getusageinformation": {
-    "name": "GetUsageInformation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list usage information of a behavior graph",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Graph",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "invokeassistant": {
-    "name": "InvokeAssistant",
-    "isPermissionOnly": true,
-    "description": "Grants permission to invoke Detective's Assistant",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Graph",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listdatasourcepackages": {
     "name": "ListDatasourcePackages",
     "description": "Grants permission to list a graph's datasource package ingest states and timestamps for the most recent state changes in a behavior graph managed by this account",
@@ -277,22 +291,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listhighdegreeentities": {
-    "name": "ListHighDegreeEntities",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve high volume entities whose relationships cannot be stored by Detective",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "Graph",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listindicators": {
     "name": "ListIndicators",
     "description": "Grants permission to list the indicators of an investigation",
@@ -352,9 +350,7 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
@@ -388,22 +384,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "searchgraph": {
-    "name": "SearchGraph",
-    "isPermissionOnly": true,
-    "description": "Grants permission to search the data stored in a behavior graph",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Graph",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startinvestigation": {
     "name": "StartInvestigation",
     "description": "Grants permission to start investigations",
@@ -437,7 +417,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to assign tag values to a behavior graph",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Graph",
@@ -447,16 +427,16 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
       "aws:RequestTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tag values from a behavior graph",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Graph",
@@ -513,8 +493,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "organizations:DescribeOrganization"
-    ]
+    "dependentActions": []
   }
 }

package/data/actions/devicefarm.json

@@ -43,13 +43,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createremoteaccesssession": {
     "name": "CreateRemoteAccessSession",
@@ -63,14 +57,14 @@
         "dependentActions": []
       },
       {
-        "name": "project",
-        "required": true,
+        "name": "deviceinstance",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "deviceinstance",
-        "required": false,
+        "name": "project",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -90,13 +84,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createtestgridurl": {
     "name": "CreateTestGridUrl",
@@ -957,14 +945,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "project",
-        "required": true,
+        "name": "devicepool",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "devicepool",
-        "required": false,
+        "name": "project",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -982,11 +970,11 @@
         "name": "Device Pool as filter",
         "resourceTypes": [
           {
-            "name": "devicepool",
+            "name": "project",
             "required": true
           },
           {
-            "name": "project",
+            "name": "devicepool",
             "required": true
           },
           {
@@ -1058,7 +1046,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "device",
@@ -1136,7 +1124,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "device",
@@ -1289,13 +1277,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "updatetestgridproject": {
     "name": "UpdateTestGridProject",
@@ -1310,13 +1292,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "updateupload": {
     "name": "UpdateUpload",

package/data/actions/devops-guru.json

@@ -12,10 +12,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sns:GetTopicAttributes",
-      "sns:SetTopicAttributes"
-    ]
+    "dependentActions": []
   },
   "deleteinsight": {
     "name": "DeleteInsight",
@@ -216,10 +213,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "sns:GetTopicAttributes",
-      "sns:SetTopicAttributes"
-    ]
+    "dependentActions": []
   },
   "searchinsights": {
     "name": "SearchInsights",

package/data/actions/directconnect.json

@@ -159,7 +159,7 @@
       },
       {
         "name": "dxcon",
-        "required": false,
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -200,20 +200,20 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "dxvif",
-        "required": true,
+        "name": "dxcon",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "dxcon",
+        "name": "dxlag",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "dxlag",
-        "required": false,
+        "name": "dxvif",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -965,7 +965,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add the specified tags to the specified AWS Direct Connect resource. Each resource can have a maximum of 50 tags",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "dx-gateway",
@@ -1001,7 +1001,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove one or more tags from the specified AWS Direct Connect resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "dx-gateway",

package/data/actions/discovery.json

@@ -34,7 +34,7 @@
   "createtags": {
     "name": "CreateTags",
     "description": "Grants permission to CreateTags API. CreateTags creates one or more tags for configuration items. Tags are metadata that help you categorize IT assets. This API accepts a list of multiple configuration items",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -50,7 +50,7 @@
   "deletetags": {
     "name": "DeleteTags",
     "description": "Grants permission to DeleteTags API. DeleteTags deletes the association between configuration items and one or more tags. This API accepts a list of multiple configuration items",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [],
     "conditionKeys": [
       "aws:TagKeys"
@@ -183,12 +183,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:AttachRolePolicy",
-      "iam:CreatePolicy",
-      "iam:CreateRole",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "startdatacollectionbyagentids": {
     "name": "StartDataCollectionByAgentIds",
@@ -212,14 +207,7 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "discovery:AssociateConfigurationItemsToApplication",
-      "discovery:CreateApplication",
-      "discovery:CreateTags",
-      "discovery:GetDiscoverySummary",
-      "discovery:ListConfigurations",
-      "s3:GetObject"
-    ]
+    "dependentActions": []
   },
   "stopcontinuousexport": {
     "name": "StopContinuousExport",

package/data/actions/dlm.json

@@ -66,7 +66,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or update tags of a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "policy",
@@ -84,7 +84,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags associated with a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "policy",