@cloud-copilot/iam-data 0.19.202607031 → 0.20.202607151

package/data/actions/qapps.json

@@ -1,25 +1,31 @@
 {
-  "associatelibraryitemreview": {
-    "name": "AssociateLibraryItemReview",
-    "description": "Grants permission to associate a library item review in the Q Business application environment",
+  "copyqapp": {
+    "name": "CopyQApp",
+    "description": "Grants permission to copy Q App in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "qapp",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
-  "associateqappwithuser": {
-    "name": "AssociateQAppWithUser",
-    "description": "Grants permission to associate Q App with a user in the Q Business application environment",
+  "createlibraryitemreview": {
+    "name": "CreateLibraryItemReview",
+    "description": "Grants permission to create a library item review in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -36,14 +42,14 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
-  "batchcreatecategory": {
-    "name": "BatchCreateCategory",
-    "description": "Grants permission to create the categories of a library in the Q Business application environment",
+  "createsubscriptiontoken": {
+    "name": "CreateSubscriptionToken",
+    "description": "Grants permission to subscribe to a Q App event bus topic in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -56,9 +62,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchdeletecategory": {
-    "name": "BatchDeleteCategory",
-    "description": "Grants permission to delete the categories of a library in the Q Business application environment",
+  "predictproblemstatementfromconversation": {
+    "name": "PredictProblemStatementFromConversation",
+    "description": "Grants permission to predict problem statement from conversation log in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -71,9 +77,9 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "batchupdatecategory": {
-    "name": "BatchUpdateCategory",
-    "description": "Grants permission to update the categories of a library in the Q Business application environment",
+  "predictqappfromproblemstatement": {
+    "name": "PredictQAppFromProblemStatement",
+    "description": "Grants permission to predict Q App metadata from problem statement in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -86,10 +92,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "copyqapp": {
-    "name": "CopyQApp",
-    "isPermissionOnly": true,
-    "description": "Grants permission to copy Q App in the Q Business application environment",
+  "associatelibraryitemreview": {
+    "name": "AssociateLibraryItemReview",
+    "description": "Grants permission to associate a library item review in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "qapp",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
+    ],
+    "dependentActions": []
+  },
+  "associateqappwithuser": {
+    "name": "AssociateQAppWithUser",
+    "description": "Grants permission to associate Q App with a user in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -106,39 +129,59 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
-  "createlibraryitem": {
-    "name": "CreateLibraryItem",
-    "description": "Grants permission to create a library item in the Q Business application environment",
+  "batchcreatecategory": {
+    "name": "BatchCreateCategory",
+    "description": "Grants permission to create the categories of a library in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
         "name": "application",
-        "required": false,
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdeletecategory": {
+    "name": "BatchDeleteCategory",
+    "description": "Grants permission to delete the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
       {
-        "name": "qapp",
-        "required": false,
+        "name": "application",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatecategory": {
+    "name": "BatchUpdateCategory",
+    "description": "Grants permission to update the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
     ],
+    "conditionKeys": [],
     "dependentActions": []
   },
-  "createlibraryitemreview": {
-    "name": "CreateLibraryItemReview",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a library item review in the Q Business application environment",
+  "createlibraryitem": {
+    "name": "CreateLibraryItem",
+    "description": "Grants permission to create a library item in the Q Business application environment",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -155,8 +198,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -178,22 +221,6 @@
     ],
     "dependentActions": []
   },
-  "createsubscriptiontoken": {
-    "name": "CreateSubscriptionToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to subscribe to a Q App event bus topic in the Q Business application environment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletelibraryitem": {
     "name": "DeleteLibraryItem",
     "description": "Grants permission to delete a library item in the Q Business application environment",
@@ -213,8 +240,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -237,8 +264,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -261,8 +288,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -279,8 +306,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -303,8 +330,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -342,8 +369,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -366,8 +393,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -384,10 +411,10 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
       "qapps:AppIsPublished",
-      "qapps:UserIsSessionModerator",
-      "qapps:SessionIsShared"
+      "qapps:SessionIsShared",
+      "qapps:UserIsAppOwner",
+      "qapps:UserIsSessionModerator"
     ],
     "dependentActions": []
   },
@@ -425,10 +452,10 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
       "qapps:AppIsPublished",
-      "qapps:UserIsSessionModerator",
-      "qapps:SessionIsShared"
+      "qapps:SessionIsShared",
+      "qapps:UserIsAppOwner",
+      "qapps:UserIsSessionModerator"
     ],
     "dependentActions": []
   },
@@ -513,22 +540,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "predictproblemstatementfromconversation": {
-    "name": "PredictProblemStatementFromConversation",
-    "isPermissionOnly": true,
-    "description": "Grants permission to predict problem statement from conversation log in the Q Business application environment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "predictqapp": {
     "name": "PredictQApp",
     "description": "Grants permission to predict Q App from conversation log or problem statement in the Q Business application environment",
@@ -544,22 +555,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "predictqappfromproblemstatement": {
-    "name": "PredictQAppFromProblemStatement",
-    "isPermissionOnly": true,
-    "description": "Grants permission to predict Q App metadata from problem statement in the Q Business application environment",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startqappsession": {
     "name": "StartQAppSession",
     "description": "Grants permission to start Q App session in the Q Business application environment",
@@ -579,10 +574,10 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -605,17 +600,17 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
       "qapps:AppIsPublished",
-      "qapps:UserIsSessionModerator",
-      "qapps:SessionIsShared"
+      "qapps:SessionIsShared",
+      "qapps:UserIsAppOwner",
+      "qapps:UserIsSessionModerator"
     ],
     "dependentActions": []
   },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource with given key value pairs",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "qapp",
@@ -639,7 +634,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the tag with the given key from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "qapp",
@@ -678,8 +673,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -719,8 +714,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -743,8 +738,8 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
-      "qapps:AppIsPublished"
+      "qapps:AppIsPublished",
+      "qapps:UserIsAppOwner"
     ],
     "dependentActions": []
   },
@@ -761,10 +756,10 @@
       }
     ],
     "conditionKeys": [
-      "qapps:UserIsAppOwner",
       "qapps:AppIsPublished",
-      "qapps:UserIsSessionModerator",
-      "qapps:SessionIsShared"
+      "qapps:SessionIsShared",
+      "qapps:UserIsAppOwner",
+      "qapps:UserIsSessionModerator"
     ],
     "dependentActions": []
   },

package/data/actions/qbusiness.json

@@ -1,9 +1,8 @@
 {
   "allowvendedlogdeliveryforresource": {
     "name": "AllowVendedLogDeliveryForResource",
-    "isPermissionOnly": true,
     "description": "Grants permission to configure vended log delivery for Amazon Q Business application resource",
-    "accessLevel": "Permissions management",
+    "accessLevel": "Permissions management, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -17,6 +16,51 @@
     ],
     "dependentActions": []
   },
+  "createdataaccessorwithtti": {
+    "name": "CreateDataAccessorWithTti",
+    "description": "Grants permission to create AWS IAM Identity center Trusted Token Issuer based DataAccessor to the application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disableaclondatasource": {
+    "name": "DisableAclOnDataSource",
+    "description": "Grants permission to disable the ACL crawl while creating the Amazon Q Business data source resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to put resource based policy statement to the application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatepermission": {
     "name": "AssociatePermission",
     "description": "Grants permission to associate resource based policy statement to the application",
@@ -30,9 +74,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "qbusiness:PutResourcePolicy"
-    ]
+    "dependentActions": []
   },
   "batchdeletedocument": {
     "name": "BatchDeleteDocument",
@@ -207,9 +249,7 @@
         "name": "application",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "qbusiness:CreateDataAccessorWithTti"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -218,22 +258,6 @@
     ],
     "dependentActions": []
   },
-  "createdataaccessorwithtti": {
-    "name": "CreateDataAccessorWithTti",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create AWS IAM Identity center Trusted Token Issuer based DataAccessor to the application",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "createdatasource": {
     "name": "CreateDataSource",
     "description": "Grants permission to create a data source for a given application and index",
@@ -343,8 +367,8 @@
       }
     ],
     "conditionKeys": [
-      "identitystore:UserId",
-      "identitystore:GroupId"
+      "identitystore:GroupId",
+      "identitystore:UserId"
     ],
     "dependentActions": []
   },
@@ -651,22 +675,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "disableaclondatasource": {
-    "name": "DisableAclOnDataSource",
-    "isPermissionOnly": true,
-    "description": "Grants permission to disable the ACL crawl while creating the Amazon Q Business data source resource",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "disassociatepermission": {
     "name": "DisassociatePermission",
     "description": "Grants permission to disassociate resource based policy statement to the application",
@@ -680,9 +688,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "qbusiness:PutResourcePolicy"
-    ]
+    "dependentActions": []
   },
   "getapplication": {
     "name": "GetApplication",
@@ -1374,22 +1380,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putresourcepolicy": {
-    "name": "PutResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants permission to put resource based policy statement to the application",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "application",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "searchrelevantcontent": {
     "name": "SearchRelevantContent",
     "description": "Grants permission to search relevant content from the Amazon Q Business Application",
@@ -1483,7 +1473,7 @@
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag a resource with given key value pairs",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",
@@ -1549,7 +1539,7 @@
   "untagresource": {
     "name": "UntagResource",
     "description": "Grants permission to remove the tag with the given key from a resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "application",