@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/evs.json

@@ -12,10 +12,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:AssociateAddress",
-      "ec2:DescribeAddresses"
-    ]
+    "dependentActions": []
   },
   "createentitlement": {
     "name": "CreateEntitlement",
@@ -41,50 +38,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:CreateSubnet",
-      "ec2:CreateTags",
-      "ec2:DeleteNetworkInterface",
-      "ec2:DeleteSubnet",
-      "ec2:DeleteVolume",
-      "ec2:DescribeAddresses",
-      "ec2:DescribeDhcpOptions",
-      "ec2:DescribeHosts",
-      "ec2:DescribeInstanceStatus",
-      "ec2:DescribeInstances",
-      "ec2:DescribeKeyPairs",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribePlacementGroups",
-      "ec2:DescribeRouteServerEndpoints",
-      "ec2:DescribeRouteServerPeers",
-      "ec2:DescribeRouteServers",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVolumes",
-      "ec2:DescribeVpcs",
-      "ec2:DetachNetworkInterface",
-      "ec2:DetachVolume",
-      "ec2:GetAllowedImagesSettings",
-      "ec2:GetRouteServerAssociations",
-      "ec2:ModifyInstanceAttribute",
-      "ec2:ModifyNetworkInterfaceAttribute",
-      "ec2:RunInstances",
-      "ec2:TerminateInstances",
-      "iam:CreateServiceLinkedRole",
-      "kms:DescribeKey",
-      "kms:ListAliases",
-      "secretsmanager:CreateSecret",
-      "secretsmanager:DeleteSecret",
-      "secretsmanager:GetRandomPassword",
-      "secretsmanager:GetSecretValue",
-      "secretsmanager:TagResource",
-      "secretsmanager:UpdateSecret",
-      "servicequotas:GetServiceQuota",
-      "servicequotas:ListServiceQuotas",
-      "support:DescribeServices",
-      "support:DescribeSupportLevel"
-    ]
+    "dependentActions": []
   },
   "createenvironmentconnector": {
     "name": "CreateEnvironmentConnector",
@@ -114,32 +68,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:CreateTags",
-      "ec2:DeleteNetworkInterface",
-      "ec2:DescribeDhcpOptions",
-      "ec2:DescribeHosts",
-      "ec2:DescribeInstanceStatus",
-      "ec2:DescribeInstances",
-      "ec2:DescribeKeyPairs",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribePlacementGroups",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcs",
-      "ec2:ModifyNetworkInterfaceAttribute",
-      "ec2:RunInstances",
-      "evs:CreateEnvironmentHost",
-      "secretsmanager:CreateSecret",
-      "secretsmanager:DeleteSecret",
-      "secretsmanager:GetRandomPassword",
-      "secretsmanager:GetSecretValue",
-      "secretsmanager:TagResource",
-      "secretsmanager:UpdateSecret",
-      "servicequotas:GetServiceQuota",
-      "servicequotas:ListServiceQuotas"
-    ]
+    "dependentActions": []
   },
   "deleteentitlement": {
     "name": "DeleteEntitlement",
@@ -169,19 +98,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DeleteNetworkInterface",
-      "ec2:DeleteSubnet",
-      "ec2:DescribeInstanceStatus",
-      "ec2:DescribeInstances",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribeSubnets",
-      "ec2:ModifyInstanceAttribute",
-      "ec2:ModifyNetworkInterfaceAttribute",
-      "ec2:TerminateInstances",
-      "secretsmanager:DeleteSecret",
-      "secretsmanager:GetSecretValue"
-    ]
+    "dependentActions": []
   },
   "deleteenvironmentconnector": {
     "name": "DeleteEnvironmentConnector",
@@ -211,17 +128,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DeleteNetworkInterface",
-      "ec2:DescribeInstanceStatus",
-      "ec2:DescribeInstances",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:ModifyInstanceAttribute",
-      "ec2:ModifyNetworkInterfaceAttribute",
-      "ec2:TerminateInstances",
-      "secretsmanager:DeleteSecret",
-      "secretsmanager:GetSecretValue"
-    ]
+    "dependentActions": []
   },
   "disassociateeipfromvlan": {
     "name": "DisassociateEipFromVlan",
@@ -236,9 +143,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DisassociateAddress"
-    ]
+    "dependentActions": []
   },
   "getdepoturl": {
     "name": "GetDepotUrl",
@@ -364,7 +269,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a specified resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -383,7 +288,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a specified resource ARN",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "environment",

package/data/actions/finops-agent.json

@@ -1,7 +1,6 @@
 {
   "acceptagentrequest": {
     "name": "AcceptAgentRequest",
-    "isPermissionOnly": true,
     "description": "Grants permission to accept a pending approval request from the agent",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -10,7 +9,6 @@
   },
   "canceltask": {
     "name": "CancelTask",
-    "isPermissionOnly": true,
     "description": "Grants permission to cancel a task",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -19,7 +17,6 @@
   },
   "cancelturn": {
     "name": "CancelTurn",
-    "isPermissionOnly": true,
     "description": "Grants permission to cancel an in-progress conversation turn",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -28,7 +25,6 @@
   },
   "createagentspace": {
     "name": "CreateAgentSpace",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new FinOps Agent workspace",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -37,7 +33,6 @@
   },
   "createautomation": {
     "name": "CreateAutomation",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a reusable automation",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -46,7 +41,6 @@
   },
   "createconnection": {
     "name": "CreateConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a connection",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -55,7 +49,6 @@
   },
   "createconversation": {
     "name": "CreateConversation",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new conversation with the FinOps Agent",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -64,7 +57,6 @@
   },
   "createdocument": {
     "name": "CreateDocument",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a document",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -73,7 +65,6 @@
   },
   "createintegration": {
     "name": "CreateIntegration",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a third-party integration",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -82,7 +73,6 @@
   },
   "createonetimeloginsession": {
     "name": "CreateOneTimeLoginSession",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a one-time login session for the FinOps Agent web application",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -91,7 +81,6 @@
   },
   "createtask": {
     "name": "CreateTask",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a task",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -100,7 +89,6 @@
   },
   "createturn": {
     "name": "CreateTurn",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a new turn in a conversation",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -109,7 +97,6 @@
   },
   "deleteagentspace": {
     "name": "DeleteAgentSpace",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a FinOps Agent workspace",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -118,7 +105,6 @@
   },
   "deleteartifact": {
     "name": "DeleteArtifact",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete an artifact and its content",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -127,7 +113,6 @@
   },
   "deleteautomation": {
     "name": "DeleteAutomation",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete an automation",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -136,7 +121,6 @@
   },
   "deleteconnection": {
     "name": "DeleteConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a connection",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -145,7 +129,6 @@
   },
   "deletedocument": {
     "name": "DeleteDocument",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a document",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -154,7 +137,6 @@
   },
   "deleteintegration": {
     "name": "DeleteIntegration",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a third-party integration",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -163,7 +145,6 @@
   },
   "getagentrequest": {
     "name": "GetAgentRequest",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of a pending approval request from the agent",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -172,7 +153,6 @@
   },
   "getagentspace": {
     "name": "GetAgentSpace",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of a FinOps Agent workspace",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -181,7 +161,6 @@
   },
   "getartifactcontent": {
     "name": "GetArtifactContent",
-    "isPermissionOnly": true,
     "description": "Grants permission to download artifact content",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -190,7 +169,6 @@
   },
   "getartifactmetadata": {
     "name": "GetArtifactMetadata",
-    "isPermissionOnly": true,
     "description": "Grants permission to view artifact metadata",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -199,7 +177,6 @@
   },
   "getautomation": {
     "name": "GetAutomation",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of an automation",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -208,7 +185,6 @@
   },
   "getconnection": {
     "name": "GetConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of a connection",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -217,7 +193,6 @@
   },
   "getdocumentcontent": {
     "name": "GetDocumentContent",
-    "isPermissionOnly": true,
     "description": "Grants permission to download document content",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -226,7 +201,6 @@
   },
   "getdocumentmetadata": {
     "name": "GetDocumentMetadata",
-    "isPermissionOnly": true,
     "description": "Grants permission to view document metadata",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -235,7 +209,6 @@
   },
   "getintegration": {
     "name": "GetIntegration",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of a third-party integration",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -244,7 +217,6 @@
   },
   "gettask": {
     "name": "GetTask",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of a task",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -253,7 +225,6 @@
   },
   "getturn": {
     "name": "GetTurn",
-    "isPermissionOnly": true,
     "description": "Grants permission to view details of a conversation turn",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -262,7 +233,6 @@
   },
   "listagentspaces": {
     "name": "ListAgentSpaces",
-    "isPermissionOnly": true,
     "description": "Grants permission to list all FinOps Agent workspaces in the account",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -271,7 +241,6 @@
   },
   "listartifacts": {
     "name": "ListArtifacts",
-    "isPermissionOnly": true,
     "description": "Grants permission to list artifacts",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -280,7 +249,6 @@
   },
   "listautomations": {
     "name": "ListAutomations",
-    "isPermissionOnly": true,
     "description": "Grants permission to list automations",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -289,7 +257,6 @@
   },
   "listconnections": {
     "name": "ListConnections",
-    "isPermissionOnly": true,
     "description": "Grants permission to list connections",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -298,7 +265,6 @@
   },
   "listconversations": {
     "name": "ListConversations",
-    "isPermissionOnly": true,
     "description": "Grants permission to list conversations",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -307,7 +273,6 @@
   },
   "listdocuments": {
     "name": "ListDocuments",
-    "isPermissionOnly": true,
     "description": "Grants permission to list documents",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -316,7 +281,6 @@
   },
   "listintegrations": {
     "name": "ListIntegrations",
-    "isPermissionOnly": true,
     "description": "Grants permission to list third-party integrations",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -325,7 +289,6 @@
   },
   "listrecords": {
     "name": "ListRecords",
-    "isPermissionOnly": true,
     "description": "Grants permission to list records for real-time agent activity display",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -334,7 +297,6 @@
   },
   "listtasks": {
     "name": "ListTasks",
-    "isPermissionOnly": true,
     "description": "Grants permission to list tasks",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -343,7 +305,6 @@
   },
   "listturns": {
     "name": "ListTurns",
-    "isPermissionOnly": true,
     "description": "Grants permission to list turns in a conversation",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -352,7 +313,6 @@
   },
   "rejectagentrequest": {
     "name": "RejectAgentRequest",
-    "isPermissionOnly": true,
     "description": "Grants permission to reject a pending approval request from the agent",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -361,7 +321,6 @@
   },
   "restoredocument": {
     "name": "RestoreDocument",
-    "isPermissionOnly": true,
     "description": "Grants permission to restore an archived document",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -370,7 +329,6 @@
   },
   "sendfeedback": {
     "name": "SendFeedback",
-    "isPermissionOnly": true,
     "description": "Grants permission to submit feedback on agent responses",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -379,7 +337,6 @@
   },
   "updateagentspace": {
     "name": "UpdateAgentSpace",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a FinOps Agent workspace configuration",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -388,7 +345,6 @@
   },
   "updateautomation": {
     "name": "UpdateAutomation",
-    "isPermissionOnly": true,
     "description": "Grants permission to update an automation",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -397,7 +353,6 @@
   },
   "updateconnection": {
     "name": "UpdateConnection",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a connection",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -406,7 +361,6 @@
   },
   "updatedocument": {
     "name": "UpdateDocument",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a document's content and metadata",
     "accessLevel": "Write",
     "resourceTypes": [],