@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/m2.json

@@ -23,10 +23,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "s3:GetObject",
-      "s3:ListBucket"
-    ]
+    "dependentActions": []
   },
   "createdatasetexporttask": {
     "name": "CreateDataSetExportTask",
@@ -41,9 +38,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:GetObject"
-    ]
+    "dependentActions": []
   },
   "createdatasetimporttask": {
     "name": "CreateDataSetImportTask",
@@ -58,9 +53,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:GetObject"
-    ]
+    "dependentActions": []
   },
   "createdeployment": {
     "name": "CreateDeployment",
@@ -71,12 +64,7 @@
         "name": "Application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "elasticloadbalancing:AddTags",
-          "elasticloadbalancing:CreateListener",
-          "elasticloadbalancing:CreateTargetGroup",
-          "elasticloadbalancing:RegisterTargets"
-        ]
+        "dependentActions": []
       },
       {
         "name": "Environment",
@@ -97,21 +85,7 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "ec2:CreateNetworkInterfacePermission",
-      "ec2:DescribeNetworkInterfaces",
-      "ec2:DescribeSecurityGroups",
-      "ec2:DescribeSubnets",
-      "ec2:DescribeVpcAttribute",
-      "ec2:DescribeVpcs",
-      "ec2:ModifyNetworkInterfaceAttribute",
-      "elasticfilesystem:DescribeMountTargets",
-      "elasticloadbalancing:AddTags",
-      "elasticloadbalancing:CreateLoadBalancer",
-      "fsx:DescribeFileSystems",
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "deleteapplication": {
     "name": "DeleteApplication",
@@ -126,10 +100,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "elasticloadbalancing:DeleteListener",
-      "elasticloadbalancing:DeleteTargetGroup"
-    ]
+    "dependentActions": []
   },
   "deleteapplicationfromenvironment": {
     "name": "DeleteApplicationFromEnvironment",
@@ -144,10 +115,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "elasticloadbalancing:DeleteListener",
-      "elasticloadbalancing:DeleteTargetGroup"
-    ]
+    "dependentActions": []
   },
   "deleteenvironment": {
     "name": "DeleteEnvironment",
@@ -162,9 +130,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "elasticloadbalancing:DeleteLoadBalancer"
-    ]
+    "dependentActions": []
   },
   "getapplication": {
     "name": "GetApplication",
@@ -494,7 +460,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Application",
@@ -518,7 +484,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to untag a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Application",
@@ -551,10 +517,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "s3:GetObject",
-      "s3:ListBucket"
-    ]
+    "dependentActions": []
   },
   "updateenvironment": {
     "name": "UpdateEnvironment",

package/data/actions/machinelearning.json

@@ -2,7 +2,7 @@
   "addtags": {
     "name": "AddTags",
     "description": "Adds one or more tags to an object, up to a limit of 10. Each tag consists of a key and an optional value",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "batchprediction",
@@ -245,7 +245,7 @@
   "deletetags": {
     "name": "DeleteTags",
     "description": "Deletes the specified tags associated with an ML object. After this operation is complete, you can't recover deleted tags",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "batchprediction",

package/data/actions/macie2.json

@@ -681,7 +681,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or update the tags for an Amazon Macie resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "AllowList",
@@ -731,7 +731,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an Amazon Macie resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "AllowList",

package/data/actions/managedblockchain.json

@@ -1,12 +1,36 @@
 {
+  "get": {
+    "name": "GET",
+    "description": "Grants permission to send HTTP GET requests to an Ethereum node",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invoke": {
+    "name": "Invoke",
+    "description": "Grants permission to create WebSocket connections to an Ethereum node",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "post": {
+    "name": "POST",
+    "description": "Grants permission to send HTTP POST requests to an Ethereum node",
+    "accessLevel": "Permissions management, Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createaccessor": {
     "name": "CreateAccessor",
     "description": "Grants permission to create an Amazon Managed Blockchain accessor",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -19,14 +43,12 @@
         "name": "network",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -36,12 +58,10 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createnode": {
     "name": "CreateNode",
@@ -52,9 +72,7 @@
         "name": "member",
         "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole"
-        ]
+        "dependentActions": []
       },
       {
         "name": "network",
@@ -64,8 +82,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -82,8 +100,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -132,15 +150,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "get": {
-    "name": "GET",
-    "isPermissionOnly": true,
-    "description": "Grants permission to send HTTP GET requests to an Ethereum node",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getaccessor": {
     "name": "GetAccessor",
     "description": "Grants permission to return detailed information about an Amazon Managed Blockchain accessor",
@@ -216,15 +225,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "invoke": {
-    "name": "Invoke",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create WebSocket connections to an Ethereum node",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "invokerpcbitcoinmainnet": {
     "name": "InvokeRpcBitcoinMainnet",
     "description": "Grants permission to invoke the Bitcoin Mainnet RPCs",
@@ -392,15 +392,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "post": {
-    "name": "POST",
-    "isPermissionOnly": true,
-    "description": "Grants permission to send HTTP POST requests to an Ethereum node",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "rejectinvitation": {
     "name": "RejectInvitation",
     "description": "Grants permission to reject the invitation to join the blockchain network",
@@ -419,7 +410,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an Amazon Managed Blockchain resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "accessor",
@@ -459,15 +450,15 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from an Amazon Managed Blockchain resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "accessor",
@@ -524,9 +515,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "updatenode": {
     "name": "UpdateNode",
@@ -541,9 +530,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "voteonproposal": {
     "name": "VoteOnProposal",

package/data/actions/mapcredits.json

@@ -1,7 +1,6 @@
 {
   "listassociatedprograms": {
     "name": "ListAssociatedPrograms",
-    "isPermissionOnly": true,
     "description": "Grants permission to view the user's associated Migration Acceleration Program agreements",
     "accessLevel": "List",
     "resourceTypes": [
@@ -17,7 +16,6 @@
   },
   "listquartercredits": {
     "name": "ListQuarterCredits",
-    "isPermissionOnly": true,
     "description": "Grants permission to view Migration Acceleration Program agreements credits associated with the user's payer account",
     "accessLevel": "List",
     "resourceTypes": [
@@ -33,7 +31,6 @@
   },
   "listquarterspend": {
     "name": "ListQuarterSpend",
-    "isPermissionOnly": true,
     "description": "Grants permission to view Migration Acceleration Program agreements eligible spend associated with the user's payer account",
     "accessLevel": "List",
     "resourceTypes": [

package/data/actions/mediaconnect.json

@@ -190,14 +190,7 @@
         "name": "RouterInput",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "iam:PassRole",
-          "mediaconnect:AssociateRouterNetworkInterface",
-          "mediaconnect:CreateRouterInput",
-          "mediaconnect:TagResource",
-          "mediaconnect:UpdateFlowOutput"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -215,11 +208,7 @@
         "name": "RouterNetworkInterface",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole",
-          "mediaconnect:CreateRouterNetworkInterface",
-          "mediaconnect:TagResource"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -237,15 +226,7 @@
         "name": "RouterOutput",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:CreateNetworkInterface",
-          "iam:PassRole",
-          "mediaconnect:AssociateRouterNetworkInterface",
-          "mediaconnect:CreateRouterOutput",
-          "mediaconnect:TagResource",
-          "mediaconnect:UpdateFlowSource",
-          "medialive:UpdateInput"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -970,7 +951,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to associate tags with resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Entitlement",
@@ -1051,7 +1032,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from resources",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Entitlement",
@@ -1294,13 +1275,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "iam:PassRole",
-      "mediaconnect:AssociateRouterNetworkInterface",
-      "mediaconnect:UpdateFlowOutput",
-      "mediaconnect:UpdateRouterInput"
-    ]
+    "dependentActions": []
   },
   "updaterouternetworkinterface": {
     "name": "UpdateRouterNetworkInterface",
@@ -1315,10 +1290,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole",
-      "mediaconnect:UpdateRouterNetworkInterface"
-    ]
+    "dependentActions": []
   },
   "updaterouteroutput": {
     "name": "UpdateRouterOutput",
@@ -1333,13 +1305,6 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:CreateNetworkInterface",
-      "iam:PassRole",
-      "mediaconnect:AssociateRouterNetworkInterface",
-      "mediaconnect:UpdateFlowSource",
-      "mediaconnect:UpdateRouterOutput",
-      "medialive:UpdateInput"
-    ]
+    "dependentActions": []
   }
 }

package/data/actions/mediaconvert.json

@@ -86,8 +86,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -98,8 +98,8 @@
     "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "aws:ResourceTag/${TagKey}"
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -369,7 +369,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to a MediaConvert queue, preset, or job template",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Job",
@@ -405,7 +405,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a MediaConvert queue, preset, or job template",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Job",

package/data/actions/mediaimport.json

@@ -1,7 +1,6 @@
 {
   "createdatabasebinarysnapshot": {
     "name": "CreateDatabaseBinarySnapshot",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a database binary snapshot on the customer's aws account",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/medialive.json

@@ -422,7 +422,7 @@
   "createtags": {
     "name": "CreateTags",
     "description": "Grants permission to create tags for channels, inputs, input security groups, multiplexes, reservations, nodes, networks, clusters, channel placement groups, signal maps, SDI sources, template groups, and templates",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channel",
@@ -516,8 +516,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -779,7 +779,7 @@
   "deletetags": {
     "name": "DeleteTags",
     "description": "Grants permission to delete tags from channels, inputs, input security groups, multiplexes, reservations, nodes, clusters, networks, channel placement groups, SDI source, signal maps, template groups, and templates",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channel",

package/data/actions/mediapackage-vod.json

@@ -12,9 +12,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createasset": {
     "name": "CreateAsset",
@@ -193,7 +191,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to assign tags to a PackagingGroup, PackagingConfiguration, or Asset",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "assets",
@@ -223,7 +221,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to delete tags from a PackagingGroup, PackagingConfiguration, or Asset",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "assets",

package/data/actions/mediapackage.json

@@ -12,9 +12,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:CreateServiceLinkedRole"
-    ]
+    "dependentActions": []
   },
   "createchannel": {
     "name": "CreateChannel",
@@ -208,7 +206,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a MediaPackage resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channels",
@@ -238,7 +236,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to delete tags to a Channel or OriginEndpoint",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "channels",

package/data/actions/mediapackagev2.json

@@ -682,7 +682,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add specified tags to the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Channel",
@@ -718,7 +718,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the specified tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "Channel",