@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/partnercentral-account-management.json

@@ -1,7 +1,6 @@
 {
   "accesslegacypartnercentral": {
     "name": "AccessLegacyPartnerCentral",
-    "isPermissionOnly": true,
     "description": "Grants permission to Single Sign-On from AWS Partner Central into Legacy Partner Central",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -12,7 +11,6 @@
   },
   "accessmarketingcentral": {
     "name": "AccessMarketingCentral",
-    "isPermissionOnly": true,
     "description": "Grants permission to Single Sign-On from AWS Partner Central into Marketing Central",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -23,7 +21,6 @@
   },
   "accessproservetools": {
     "name": "AccessProServeTools",
-    "isPermissionOnly": true,
     "description": "Grants permission to Single Sign-On from AWS Partner Central into ProServe Tools",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -34,7 +31,6 @@
   },
   "associatepartneraccount": {
     "name": "AssociatePartnerAccount",
-    "isPermissionOnly": true,
     "description": "Grants permission to associate Partner account to AWS account",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/partnercentral.json

@@ -1,4 +1,120 @@
 {
+  "createbusinessplan": {
+    "name": "CreateBusinessPlan",
+    "description": "Grants permission to create business plans in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcollaborationchannelmembers": {
+    "name": "CreateCollaborationChannelMembers",
+    "description": "Grants permission to create collaboration channel members in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createcollaborationchannelrequest": {
+    "name": "CreateCollaborationChannelRequest",
+    "description": "Grants permission to create collaboration channel requests in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enrollinpartnerpath": {
+    "name": "EnrollInPartnerPath",
+    "description": "Grants permission to enroll in partner paths in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getbusinessplan": {
+    "name": "GetBusinessPlan",
+    "description": "Grants permission to retrieve business plan details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcollaborationchannel": {
+    "name": "GetCollaborationChannel",
+    "description": "Grants permission to retrieve collaboration channel details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpartnerprofile": {
+    "name": "GetPartnerProfile",
+    "description": "Grants permission to retrieve public partner profile details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getprogrammanagementaccount": {
+    "name": "GetProgramManagementAccount",
+    "description": "Grants permission to retrieve program management account details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "listbusinessplans": {
+    "name": "ListBusinessPlans",
+    "description": "Grants permission to list business plans in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcollaborationchannels": {
+    "name": "ListCollaborationChannels",
+    "description": "Grants permission to list collaboration channels in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpartnerpaths": {
+    "name": "ListPartnerPaths",
+    "description": "Grants permission to list partner paths in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putbusinessplan": {
+    "name": "PutBusinessPlan",
+    "description": "Grants permission to update business plans in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchpartnerprofiles": {
+    "name": "SearchPartnerProfiles",
+    "description": "Grants permission to search public partner profiles in AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "usesession": {
+    "name": "UseSession",
+    "description": "Grants permission to use Partner Central Agents sessions in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "acceptchannelhandshake": {
     "name": "AcceptChannelHandshake",
     "description": "Grants permission to accept channel handshakes in AWS Partner Central",
@@ -262,15 +378,6 @@
     ],
     "dependentActions": []
   },
-  "createbusinessplan": {
-    "name": "CreateBusinessPlan",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create business plans in AWS Partner Central",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createchannelhandshake": {
     "name": "CreateChannelHandshake",
     "description": "Grants permission to create channel handshakes in AWS Partner Central",
@@ -298,24 +405,6 @@
     ],
     "dependentActions": []
   },
-  "createcollaborationchannelmembers": {
-    "name": "CreateCollaborationChannelMembers",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create collaboration channel members in AWS Partner Central",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "createcollaborationchannelrequest": {
-    "name": "CreateCollaborationChannelRequest",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create collaboration channel requests in AWS Partner Central",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createconnectioninvitation": {
     "name": "CreateConnectionInvitation",
     "description": "Grants permission to create connection invitations in AWS Partner Central",
@@ -640,15 +729,6 @@
     ],
     "dependentActions": []
   },
-  "enrollinpartnerpath": {
-    "name": "EnrollInPartnerPath",
-    "isPermissionOnly": true,
-    "description": "Grants permission to enroll in partner paths in AWS Partner Central",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getallianceleadcontact": {
     "name": "GetAllianceLeadContact",
     "description": "Grants permission to retrieve alliance lead contact information in AWS Partner Central",
@@ -743,24 +823,6 @@
     ],
     "dependentActions": []
   },
-  "getbusinessplan": {
-    "name": "GetBusinessPlan",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve business plan details in AWS Partner Central",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getcollaborationchannel": {
-    "name": "GetCollaborationChannel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve collaboration channel details in AWS Partner Central",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getconnection": {
     "name": "GetConnection",
     "description": "Grants permission to retrieve connection details in AWS Partner Central",
@@ -925,15 +987,6 @@
     ],
     "dependentActions": []
   },
-  "getpartnerprofile": {
-    "name": "GetPartnerProfile",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve public partner profile details in AWS Partner Central",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getprofileupdatetask": {
     "name": "GetProfileUpdateTask",
     "description": "Grants permission to retrieve profile update task details in AWS Partner Central",
@@ -970,30 +1023,73 @@
     ],
     "dependentActions": []
   },
-  "getprogrammanagementaccount": {
-    "name": "GetProgramManagementAccount",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve program management account details in AWS Partner Central",
+  "getprospectingfromengagementtask": {
+    "name": "GetProspectingFromEngagementTask",
+    "description": "Grants permission to retrieve prospecting from engagement task details in AWS Partner Central",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "ProspectingFromEngagementTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "partnercentral:Catalog"
     ],
     "dependentActions": []
   },
-  "getprospectingfromengagementtask": {
-    "name": "GetProspectingFromEngagementTask",
-    "description": "Grants permission to retrieve prospecting from engagement task details in AWS Partner Central",
+  "getqualificationsassociationdetails": {
+    "name": "GetQualificationsAssociationDetails",
+    "description": "Grants permission to retrieve qualifications association details in AWS Partner Central",
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "ProspectingFromEngagementTask",
+        "name": "Partner",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getqualificationsassociationtask": {
+    "name": "GetQualificationsAssociationTask",
+    "description": "Grants permission to retrieve qualifications association task details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Partner",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getqualificationsdisassociationtask": {
+    "name": "GetQualificationsDisassociationTask",
+    "description": "Grants permission to retrieve qualifications disassociation task details in AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Partner",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
       "partnercentral:Catalog"
     ],
     "dependentActions": []
@@ -1178,15 +1274,6 @@
     ],
     "dependentActions": []
   },
-  "listbusinessplans": {
-    "name": "ListBusinessPlans",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list business plans in AWS Partner Central",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listchannelhandshakes": {
     "name": "ListChannelHandshakes",
     "description": "Grants permission to list channel handshakes in AWS Partner Central",
@@ -1205,15 +1292,6 @@
     ],
     "dependentActions": []
   },
-  "listcollaborationchannels": {
-    "name": "ListCollaborationChannels",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list collaboration channels in AWS Partner Central",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listconnectioninvitations": {
     "name": "ListConnectionInvitations",
     "description": "Grants permission to list connection invitations in AWS Partner Central",
@@ -1355,15 +1433,6 @@
     ],
     "dependentActions": []
   },
-  "listpartnerpaths": {
-    "name": "ListPartnerPaths",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list partner paths in AWS Partner Central",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listpartners": {
     "name": "ListPartners",
     "description": "Grants permission to list partners in AWS Partner Central",
@@ -1514,15 +1583,6 @@
     ],
     "dependentActions": []
   },
-  "putbusinessplan": {
-    "name": "PutBusinessPlan",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update business plans in AWS Partner Central",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "putprofilevisibility": {
     "name": "PutProfileVisibility",
     "description": "Grants permission to set profile visibility in AWS Partner Central",
@@ -1623,15 +1683,6 @@
     ],
     "dependentActions": []
   },
-  "searchpartnerprofiles": {
-    "name": "SearchPartnerProfiles",
-    "isPermissionOnly": true,
-    "description": "Grants permission to search public partner profiles in AWS Partner Central",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "sendemailverificationcode": {
     "name": "SendEmailVerificationCode",
     "description": "Grants permission to send email verification codes in AWS Partner Central",
@@ -1651,14 +1702,7 @@
         "name": "engagement-by-accepting-invitation-task",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "partnercentral:AcceptEngagementInvitation",
-          "partnercentral:CreateOpportunity",
-          "partnercentral:CreateResourceSnapshotJob",
-          "partnercentral:GetEngagementInvitation",
-          "partnercentral:StartResourceSnapshotJob",
-          "partnercentral:SubmitOpportunity"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1678,14 +1722,7 @@
         "name": "engagement-from-opportunity-task",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "partnercentral:CreateEngagement",
-          "partnercentral:CreateEngagementInvitation",
-          "partnercentral:CreateResourceSnapshotJob",
-          "partnercentral:GetOpportunity",
-          "partnercentral:StartResourceSnapshotJob",
-          "partnercentral:SubmitOpportunity"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1705,14 +1742,7 @@
         "name": "OpportunityFromEngagementTask",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "partnercentral:CreateEngagementContext",
-          "partnercentral:CreateOpportunity",
-          "partnercentral:CreateResourceSnapshot",
-          "partnercentral:CreateResourceSnapshotJob",
-          "partnercentral:GetEngagement",
-          "partnercentral:StartResourceSnapshotJob"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1758,6 +1788,42 @@
     ],
     "dependentActions": []
   },
+  "startqualificationsassociationtask": {
+    "name": "StartQualificationsAssociationTask",
+    "description": "Grants permission to initiate tasks that start qualifications association in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Partner",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "startqualificationsdisassociationtask": {
+    "name": "StartQualificationsDisassociationTask",
+    "description": "Grants permission to initiate tasks that start qualifications disassociation in AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Partner",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "startresourcesnapshotjob": {
     "name": "StartResourceSnapshotJob",
     "description": "Grants permission to starting resource snapshot jobs in AWS Partner Central",
@@ -1860,7 +1926,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "BenefitApplication",
@@ -1930,7 +1996,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "BenefitApplication",
@@ -2129,16 +2195,5 @@
       "partnercentral:Catalog"
     ],
     "dependentActions": []
-  },
-  "usesession": {
-    "name": "UseSession",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use Partner Central Agents sessions in AWS Partner Central",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "partnercentral:Catalog"
-    ],
-    "dependentActions": []
   }
 }

package/data/actions/payment-cryptography.json

@@ -35,11 +35,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "mpa:CancelSession",
-      "mpa:GetApprovalTeam",
-      "mpa:StartSession"
-    ]
+    "dependentActions": []
   },
   "createalias": {
     "name": "CreateAlias",
@@ -70,13 +66,11 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "payment-cryptography:KeyAlgorithm",
       "payment-cryptography:KeyClass",
-      "payment-cryptography:KeyUsage",
-      "payment-cryptography:KeyAlgorithm"
+      "payment-cryptography:KeyUsage"
     ],
-    "dependentActions": [
-      "payment-cryptography:TagResource"
-    ]
+    "dependentActions": []
   },
   "decryptdata": {
     "name": "DecryptData",
@@ -128,9 +122,7 @@
         "name": "key",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "mpa:CancelSession"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -141,7 +133,7 @@
   "deleteresourcepolicy": {
     "name": "DeleteResourcePolicy",
     "description": "Grants permission to delete the resource-based policy attached to a key",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "key",
@@ -174,10 +166,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "mpa:CancelSession",
-      "mpa:StartSession"
-    ]
+    "dependentActions": []
   },
   "enabledefaultkeyreplicationregions": {
     "name": "EnableDefaultKeyReplicationRegions",
@@ -223,8 +212,8 @@
       }
     ],
     "conditionKeys": [
-      "payment-cryptography:RequestAlias",
       "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:RequestAlias",
       "payment-cryptography:WrappingKeyIdentifier"
     ],
     "dependentActions": []
@@ -487,14 +476,11 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "payment-cryptography:ImportKeyMaterial",
       "payment-cryptography:CertificateAuthorityPublicKeyIdentifier",
+      "payment-cryptography:ImportKeyMaterial",
       "payment-cryptography:WrappingKeyIdentifier"
     ],
-    "dependentActions": [
-      "mpa:StartSession",
-      "payment-cryptography:TagResource"
-    ]
+    "dependentActions": []
   },
   "listaliases": {
     "name": "ListAliases",
@@ -530,7 +516,7 @@
   "putresourcepolicy": {
     "name": "PutResourcePolicy",
     "description": "Grants permission to attach or replace a resource-based policy on a key",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "key",
@@ -642,7 +628,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add or overwrites one or more tags for the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "key",
@@ -652,8 +638,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },
@@ -706,7 +692,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the specified tag or tags from the specified resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "key",