@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/finspace.json

@@ -1,7 +1,6 @@
 {
   "connectkxcluster": {
     "name": "ConnectKxCluster",
-    "isPermissionOnly": true,
     "description": "Grants permission to connect to a kdb cluster",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -15,6 +14,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "mountkxdatabase": {
+    "name": "MountKxDatabase",
+    "description": "Grants permission to mount a database to a kdb cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "kxDatabase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createenvironment": {
     "name": "CreateEnvironment",
     "description": "Grants permission to create a FinSpace environment",
@@ -28,8 +42,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -57,15 +71,12 @@
         "name": "kxCluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeSubnets",
-          "finspace:MountKxDatabase"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -82,8 +93,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -100,8 +111,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -111,8 +122,8 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -129,8 +140,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -147,8 +158,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -165,8 +176,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -189,8 +200,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -387,9 +398,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "finspace:ConnectKxCluster"
-    ]
+    "dependentActions": []
   },
   "getkxdatabase": {
     "name": "GetKxDatabase",
@@ -753,22 +762,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "mountkxdatabase": {
-    "name": "MountKxDatabase",
-    "isPermissionOnly": true,
-    "description": "Grants permission to mount a database to a kdb cluster",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "kxDatabase",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "resetuserpassword": {
     "name": "ResetUserPassword",
     "description": "Grants permission to reset the password for a FinSpace user",
@@ -793,7 +786,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "environment",
@@ -845,15 +838,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "environment",

package/data/actions/firehose.json

@@ -133,7 +133,7 @@
   "tagdeliverystream": {
     "name": "TagDeliveryStream",
     "description": "Grants permission to add or update tags for the specified delivery stream",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "deliverystream",
@@ -151,7 +151,7 @@
   "untagdeliverystream": {
     "name": "UntagDeliveryStream",
     "description": "Grants permission to remove tags from the specified delivery stream",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "deliverystream",

package/data/actions/fis.json

@@ -1,4 +1,64 @@
 {
+  "injectapiinternalerror": {
+    "name": "InjectApiInternalError",
+    "description": "Grants permission to inject an API internal error on the provided AWS service from an FIS Experiment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "experiment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "fis:Operations",
+      "fis:Percentage",
+      "fis:Service",
+      "fis:Targets"
+    ],
+    "dependentActions": []
+  },
+  "injectapithrottleerror": {
+    "name": "InjectApiThrottleError",
+    "description": "Grants permission to inject an API throttle error on the provided AWS service from an FIS Experiment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "experiment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "fis:Operations",
+      "fis:Percentage",
+      "fis:Service",
+      "fis:Targets"
+    ],
+    "dependentActions": []
+  },
+  "injectapiunavailableerror": {
+    "name": "InjectApiUnavailableError",
+    "description": "Grants permission to inject an API unavailable error on the provided AWS service from an FIS Experiment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "experiment",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "fis:Operations",
+      "fis:Percentage",
+      "fis:Service",
+      "fis:Targets"
+    ],
+    "dependentActions": []
+  },
   "createexperimenttemplate": {
     "name": "CreateExperimentTemplate",
     "description": "Grants permission to create an AWS FIS experiment template",
@@ -172,69 +232,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "injectapiinternalerror": {
-    "name": "InjectApiInternalError",
-    "isPermissionOnly": true,
-    "description": "Grants permission to inject an API internal error on the provided AWS service from an FIS Experiment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "experiment",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "fis:Service",
-      "fis:Operations",
-      "fis:Percentage",
-      "fis:Targets"
-    ],
-    "dependentActions": []
-  },
-  "injectapithrottleerror": {
-    "name": "InjectApiThrottleError",
-    "isPermissionOnly": true,
-    "description": "Grants permission to inject an API throttle error on the provided AWS service from an FIS Experiment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "experiment",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "fis:Service",
-      "fis:Operations",
-      "fis:Percentage",
-      "fis:Targets"
-    ],
-    "dependentActions": []
-  },
-  "injectapiunavailableerror": {
-    "name": "InjectApiUnavailableError",
-    "isPermissionOnly": true,
-    "description": "Grants permission to inject an API unavailable error on the provided AWS service from an FIS Experiment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "experiment",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "fis:Service",
-      "fis:Operations",
-      "fis:Percentage",
-      "fis:Targets"
-    ],
-    "dependentActions": []
-  },
   "listactions": {
     "name": "ListActions",
     "description": "Grants permission to list all available AWS FIS actions",
@@ -348,9 +345,7 @@
         "name": "experiment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "experiment-template",
@@ -383,7 +378,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag AWS FIS resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "action",
@@ -405,15 +400,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag AWS FIS resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "action",
@@ -445,14 +440,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "experiment-template",
-        "required": true,
+        "name": "action",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
-        "name": "action",
-        "required": false,
+        "name": "experiment-template",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/fms.json

@@ -478,7 +478,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add a Tag to a given resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "applications-list",
@@ -514,7 +514,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove a Tag from a given resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "applications-list",

package/data/actions/forecast.json

@@ -1,4 +1,82 @@
 {
+  "createforecastendpoint": {
+    "name": "CreateForecastEndpoint",
+    "description": "Grants permission to create an endpoint using a Predictor resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "predictor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteforecastendpoint": {
+    "name": "DeleteForecastEndpoint",
+    "description": "Grants permission to delete an endpoint resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeforecastendpoint": {
+    "name": "DescribeForecastEndpoint",
+    "description": "Grants permission to describe an endpoint resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getrecentforecastcontext": {
+    "name": "GetRecentForecastContext",
+    "description": "Grants permission to get the forecast context of a timeseries for an endpoint",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeforecastendpoint": {
+    "name": "InvokeForecastEndpoint",
+    "description": "Grants permission to invoke the endpoint to get forecast for a timeseries",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createautopredictor": {
     "name": "CreateAutoPredictor",
     "description": "Grants permission to create an auto predictor",
@@ -118,25 +196,6 @@
     ],
     "dependentActions": []
   },
-  "createforecastendpoint": {
-    "name": "CreateForecastEndpoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create an endpoint using a Predictor resource",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "predictor",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
   "createforecastexportjob": {
     "name": "CreateForecastExportJob",
     "description": "Grants permission to create a forecast export job using a forecast resource",
@@ -353,22 +412,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteforecastendpoint": {
-    "name": "DeleteForecastEndpoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete an endpoint resource",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "endpoint",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deleteforecastexportjob": {
     "name": "DeleteForecastExportJob",
     "description": "Grants permission to delete a forecast export job",
@@ -672,22 +715,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeforecastendpoint": {
-    "name": "DescribeForecastEndpoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe an endpoint resource",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "endpoint",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeforecastexportjob": {
     "name": "DescribeForecastExportJob",
     "description": "Grants permission to describe a forecast export job",
@@ -808,38 +835,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getrecentforecastcontext": {
-    "name": "GetRecentForecastContext",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get the forecast context of a timeseries for an endpoint",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "endpoint",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "invokeforecastendpoint": {
-    "name": "InvokeForecastEndpoint",
-    "isPermissionOnly": true,
-    "description": "Grants permission to invoke the endpoint to get forecast for a timeseries",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "endpoint",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listdatasetgroups": {
     "name": "ListDatasetGroups",
     "description": "Grants permission to list all the dataset groups",
@@ -1187,7 +1182,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate the specified tags to a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "dataset",
@@ -1283,7 +1278,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to delete the specified tags for a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "dataset",