@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/dynamodb.json

@@ -1,7 +1,6 @@
 {
   "associatetablereplica": {
     "name": "AssociateTableReplica",
-    "isPermissionOnly": true,
     "description": "Grants permission to create multi account global table replica",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -15,6 +14,213 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createglobaltablewitness": {
+    "name": "CreateGlobalTableWitness",
+    "description": "Grants permission to add a Witness to a Global Table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createtablereplica": {
+    "name": "CreateTableReplica",
+    "description": "Grants permission to add a new replica table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteglobaltablewitness": {
+    "name": "DeleteGlobalTableWitness",
+    "description": "Grants permission to remove a Witness from a Global Table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetablereplica": {
+    "name": "DeleteTableReplica",
+    "description": "Grants permission to delete a replica table and all of its items",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describereservedcapacity": {
+    "name": "DescribeReservedCapacity",
+    "description": "Grants permission to describe one or more of the Reserved Capacity purchased",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describereservedcapacityofferings": {
+    "name": "DescribeReservedCapacityOfferings",
+    "description": "Grants permission to describe Reserved Capacity offerings that are available for purchase",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getabacstatus": {
+    "name": "GetAbacStatus",
+    "description": "Grants permission to view the status of Attribute Based Access Control for the account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "injecterror": {
+    "name": "InjectError",
+    "description": "Grants permission to start experiments on a Global Table",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "dynamodb:FisActionId",
+      "dynamodb:FisTargetArns"
+    ],
+    "dependentActions": []
+  },
+  "purchasereservedcapacityofferings": {
+    "name": "PurchaseReservedCapacityOfferings",
+    "description": "Grants permission to purchases reserved capacity for use with your account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "readdataforreplication": {
+    "name": "ReadDataForReplication",
+    "description": "Grants permission to read data from a multi account global table replica",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "replicatesettings": {
+    "name": "ReplicateSettings",
+    "description": "Grants permission to configure settings for a multi account global table replica",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "restoretablefromawsbackup": {
+    "name": "RestoreTableFromAwsBackup",
+    "description": "Grants permission to create a new table from recovery point on AWS Backup",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startawsbackupjob": {
+    "name": "StartAwsBackupJob",
+    "description": "Grants permission to create a backup on AWS Backup with advanced features enabled",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateabacstatus": {
+    "name": "UpdateAbacStatus",
+    "description": "Grants permission to update the status of Attribute Based Access Control for the account",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateglobaltableversion": {
+    "name": "UpdateGlobalTableVersion",
+    "description": "Grants permission to update version of the specified global table",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "global-table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "writedataforreplication": {
+    "name": "WriteDataForReplication",
+    "description": "Grants permission to write data to a multi account global table replica",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetitem": {
     "name": "BatchGetItem",
     "description": "Grants permission to return the attributes of one or more items from one or more tables",
@@ -110,22 +316,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createglobaltablewitness": {
-    "name": "CreateGlobalTableWitness",
-    "isPermissionOnly": true,
-    "description": "Grants permission to add a Witness to a Global Table",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createtable": {
     "name": "CreateTable",
     "description": "Grants permission to the CreateTable operation adds a new table to your account",
@@ -144,22 +334,6 @@
     ],
     "dependentActions": []
   },
-  "createtablereplica": {
-    "name": "CreateTableReplica",
-    "isPermissionOnly": true,
-    "description": "Grants permission to add a new replica table",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletebackup": {
     "name": "DeleteBackup",
     "description": "Grants permission to delete an existing backup of a table",
@@ -175,22 +349,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteglobaltablewitness": {
-    "name": "DeleteGlobalTableWitness",
-    "isPermissionOnly": true,
-    "description": "Grants permission to remove a Witness from a Global Table",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteitem": {
     "name": "DeleteItem",
     "description": "Grants permission to deletes a single item in a table by primary key",
@@ -215,7 +373,7 @@
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete the resource-based policy attached to the resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "stream",
@@ -248,22 +406,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deletetablereplica": {
-    "name": "DeleteTableReplica",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a replica table and all of its items",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describebackup": {
     "name": "DescribeBackup",
     "description": "Grants permission to describe an existing backup of a table",
@@ -300,14 +442,14 @@
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "table",
-        "required": true,
+        "name": "index",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "index",
-        "required": false,
+        "name": "table",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -406,24 +548,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describereservedcapacity": {
-    "name": "DescribeReservedCapacity",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe one or more of the Reserved Capacity purchased",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "describereservedcapacityofferings": {
-    "name": "DescribeReservedCapacityOfferings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe Reserved Capacity offerings that are available for purchase",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describestream": {
     "name": "DescribeStream",
     "description": "Grants permission to return information about a stream, including the current status of the stream, its Amazon Resource Name (ARN), the composition of its shards, and its corresponding DynamoDB table",
@@ -529,15 +653,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getabacstatus": {
-    "name": "GetAbacStatus",
-    "isPermissionOnly": true,
-    "description": "Grants permission to view the status of Attribute Based Access Control for the account",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getitem": {
     "name": "GetItem",
     "description": "Grants permission to the GetItem operation that returns a set of attributes for the item with the given primary key",
@@ -625,18 +740,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "injecterror": {
-    "name": "InjectError",
-    "isPermissionOnly": true,
-    "description": "Grants permission to start experiments on a Global Table",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "dynamodb:FisActionId",
-      "dynamodb:FisTargetArns"
-    ],
-    "dependentActions": []
-  },
   "listbackups": {
     "name": "ListBackups",
     "description": "Grants permission to list backups associated with the account and endpoint",
@@ -657,7 +760,14 @@
     "name": "ListExports",
     "description": "Grants permission to list exports associated with the account and endpoint",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -673,7 +783,14 @@
     "name": "ListImports",
     "description": "Grants permission to list imports associated with the account and endpoint",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "table",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -698,6 +815,12 @@
     "description": "Grants permission to list all tags on an Amazon DynamoDB resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "table",
         "required": true,
@@ -753,14 +876,14 @@
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "table",
-        "required": true,
+        "name": "index",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "index",
-        "required": false,
+        "name": "table",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -794,15 +917,6 @@
     ],
     "dependentActions": []
   },
-  "purchasereservedcapacityofferings": {
-    "name": "PurchaseReservedCapacityOfferings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to purchases reserved capacity for use with your account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putitem": {
     "name": "PutItem",
     "description": "Grants permission to create a new item, or replace an old item with a new item",
@@ -827,7 +941,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to attach a resource-based policy to the resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "stream",
@@ -851,14 +965,14 @@
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "table",
-        "required": true,
+        "name": "index",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "index",
-        "required": false,
+        "name": "table",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -872,54 +986,6 @@
     ],
     "dependentActions": []
   },
-  "readdataforreplication": {
-    "name": "ReadDataForReplication",
-    "isPermissionOnly": true,
-    "description": "Grants permission to read data from a multi account global table replica",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "replicatesettings": {
-    "name": "ReplicateSettings",
-    "isPermissionOnly": true,
-    "description": "Grants permission to configure settings for a multi account global table replica",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "restoretablefromawsbackup": {
-    "name": "RestoreTableFromAwsBackup",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a new table from recovery point on AWS Backup",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "restoretablefrombackup": {
     "name": "RestoreTableFromBackup",
     "description": "Grants permission to create a new table from an existing backup",
@@ -929,15 +995,7 @@
         "name": "backup",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "dynamodb:BatchWriteItem",
-          "dynamodb:DeleteItem",
-          "dynamodb:GetItem",
-          "dynamodb:PutItem",
-          "dynamodb:Query",
-          "dynamodb:Scan",
-          "dynamodb:UpdateItem"
-        ]
+        "dependentActions": []
       },
       {
         "name": "table",
@@ -962,15 +1020,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "dynamodb:BatchWriteItem",
-      "dynamodb:DeleteItem",
-      "dynamodb:GetItem",
-      "dynamodb:PutItem",
-      "dynamodb:Query",
-      "dynamodb:Scan",
-      "dynamodb:UpdateItem"
-    ]
+    "dependentActions": []
   },
   "scan": {
     "name": "Scan",
@@ -978,14 +1028,14 @@
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "table",
-        "required": true,
+        "name": "index",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "index",
-        "required": false,
+        "name": "table",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -998,27 +1048,17 @@
     ],
     "dependentActions": []
   },
-  "startawsbackupjob": {
-    "name": "StartAwsBackupJob",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a backup on AWS Backup with advanced features enabled",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate a set of tags with an Amazon DynamoDB resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "table",
         "required": true,
@@ -1035,8 +1075,14 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the association of tags from an Amazon DynamoDB resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
+      {
+        "name": "stream",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "table",
         "required": true,
@@ -1049,15 +1095,6 @@
     ],
     "dependentActions": []
   },
-  "updateabacstatus": {
-    "name": "UpdateAbacStatus",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the status of Attribute Based Access Control for the account",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatecontinuousbackups": {
     "name": "UpdateContinuousBackups",
     "description": "Grants permission to enable or disable continuous backups",
@@ -1079,14 +1116,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "table",
-        "required": true,
+        "name": "index",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "index",
-        "required": false,
+        "name": "table",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1136,28 +1173,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updateglobaltableversion": {
-    "name": "UpdateGlobalTableVersion",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update version of the specified global table",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "global-table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "table",
-        "required": false,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updateitem": {
     "name": "UpdateItem",
     "description": "Grants permission to edit an existing item's attributes, or adds a new item to the table if it does not already exist",
@@ -1238,21 +1253,5 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
-  },
-  "writedataforreplication": {
-    "name": "WriteDataForReplication",
-    "isPermissionOnly": true,
-    "description": "Grants permission to write data to a multi account global table replica",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "table",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
   }
 }