@cloud-copilot/iam-data 0.2.202408313 → 0.3.202409011-beta

package/data/actions/thinclient.json

@@ -8,7 +8,12 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "appstream:DescribeStacks",
+      "workspaces-web:GetPortal",
+      "workspaces-web:GetUserSettings",
+      "workspaces:DescribeWorkspaceDirectories"
+    ]
   },
   "deletedevice": {
     "name": "DeleteDevice",
@@ -22,7 +27,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deleteenvironment": {
@@ -37,7 +44,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "deregisterdevice": {
@@ -52,7 +61,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getdevice": {
@@ -67,7 +78,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getenvironment": {
@@ -82,7 +95,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "getsoftwareset": {
@@ -97,7 +112,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listdevicesessions": {
@@ -113,7 +130,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "listdevices": {
@@ -174,7 +193,8 @@
     ],
     "conditionKeys": [
       "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -203,7 +223,8 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -219,7 +240,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updateenvironment": {
@@ -231,10 +254,17 @@
         "name": "environment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "appstream:DescribeStacks",
+          "workspaces-web:GetPortal",
+          "workspaces-web:GetUserSettings",
+          "workspaces:DescribeWorkspaceDirectories"
+        ]
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   },
   "updatesoftwareset": {
@@ -249,7 +279,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
     "dependentActions": []
   }
 }

package/data/actions/wickr.json

@@ -22,6 +22,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletenetwork": {
+    "name": "DeleteNetwork",
+    "description": "Grants permission to create a delete Wickr networks",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnetworks": {
     "name": "ListNetworks",
     "description": "Grants permission to view Wickr networks",

package/data/actions/wisdom.json

@@ -46,6 +46,30 @@
     ],
     "dependentActions": []
   },
+  "createcontentassociation": {
+    "name": "CreateContentAssociation",
+    "description": "Grants permission to create a content association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "KnowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "createknowledgebase": {
     "name": "CreateKnowledgeBase",
     "description": "Grants permission to create a knowledge base",
@@ -150,6 +174,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecontentassociation": {
+    "name": "DeleteContentAssociation",
+    "description": "Grants permission to delete a content association",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ContentAssociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "KnowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteimportjob": {
     "name": "DeleteImportJob",
     "description": "Grants permission to delete a import job of a knowledge base",
@@ -258,6 +309,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcontentassociation": {
+    "name": "GetContentAssociation",
+    "description": "Grants permission to retrieve information about a content association",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ContentAssociation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "KnowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcontentsummary": {
     "name": "GetContentSummary",
     "description": "Grants permission to retrieve summary information about the content",
@@ -389,6 +467,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcontentassociations": {
+    "name": "ListContentAssociations",
+    "description": "Grants permission to list information about content associations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Content",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "KnowledgeBase",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontents": {
     "name": "ListContents",
     "description": "Grants permission to list the content with a knowledge base",
@@ -465,6 +564,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putfeedback": {
+    "name": "PutFeedback",
+    "description": "Grants permission to submit feedback",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "queryassistant": {
     "name": "QueryAssistant",
     "description": "Grants permission to perform a manual search against the specified assistant",
@@ -743,120 +857,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "createcontentassociation": {
-    "name": "CreateContentAssociation",
-    "description": "Grants permission to create a content association",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Content",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "KnowledgeBase",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
-    ],
-    "dependentActions": []
-  },
-  "deletecontentassociation": {
-    "name": "DeleteContentAssociation",
-    "description": "Grants permission to delete a content association",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Content",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "ContentAssociation",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "KnowledgeBase",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "getcontentassociation": {
-    "name": "GetContentAssociation",
-    "description": "Grants permission to retrieve information about a content association",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "Content",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "ContentAssociation",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "KnowledgeBase",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listcontentassociations": {
-    "name": "ListContentAssociations",
-    "description": "Grants permission to list information about content associations",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "Content",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
-      {
-        "name": "KnowledgeBase",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "putfeedback": {
-    "name": "PutFeedback",
-    "description": "Grants permission to submit feedback",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "Assistant",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatesession": {
     "name": "UpdateSession",
     "description": "Grants permission to update a session",

package/data/actions/workspaces-web.json

@@ -802,8 +802,7 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys",
-      "aws:RequestTag/${TagKey}"
+      "aws:TagKeys"
     ],
     "dependentActions": []
   },

package/data/conditionKeys/bedrock.json

@@ -14,6 +14,11 @@
     "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
     "type": "ArrayOfString"
   },
+  "bedrock:inferenceprofilearn": {
+    "key": "bedrock:InferenceProfileArn",
+    "description": "Filters access by the specified inference profile",
+    "type": "ARN"
+  },
   "bedrock:thirdpartyknowledgebasecredentialssecretarn": {
     "key": "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn",
     "description": "Filters access by the secretArn containing the credentials of the third party platform",

package/data/conditionKeys/pcs.json

@@ -0,0 +1,17 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/ram.json

@@ -61,7 +61,7 @@
   },
   "ram:shareowneraccountid": {
     "key": "ram:ShareOwnerAccountId",
-    "description": "Filters access by resource shares owned by a specific account. For example, you can use this condition key to specify which resource share invitations can be accepted or rejected based on the resource share owner’s account ID",
+    "description": "Filters access by resource shares owned by a specific account. For example, you can use this condition key to specify which resource share invitations can be accepted or rejected based on the resource share owner's account ID",
     "type": "String"
   }
 }

package/data/resourceTypes/bedrock.json

@@ -3,6 +3,10 @@
     "key": "foundation-model",
     "arn": "arn:${Partition}:bedrock:${Region}::foundation-model/${ResourceId}"
   },
+  "inference-profile": {
+    "key": "inference-profile",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/${ResourceId}"
+  },
   "custom-model": {
     "key": "custom-model",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId}",
@@ -107,5 +111,19 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "model-import-job": {
+    "key": "model-import-job",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "imported-model": {
+    "key": "imported-model",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:imported-model/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/events.json

@@ -43,5 +43,21 @@
   "endpoint": {
     "key": "endpoint",
     "arn": "arn:${Partition}:events:${Region}:${Account}:endpoint/${EndpointName}"
+  },
+  "create-snapshot": {
+    "key": "create-snapshot",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/create-snapshot"
+  },
+  "reboot-instance": {
+    "key": "reboot-instance",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/reboot-instance"
+  },
+  "stop-instance": {
+    "key": "stop-instance",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/stop-instance"
+  },
+  "terminate-instance": {
+    "key": "terminate-instance",
+    "arn": "arn:${Partition}:events:${Region}:${Account}:target/terminate-instance"
   }
 }

package/data/resourceTypes/pcs.json

@@ -0,0 +1,23 @@
+{
+  "cluster": {
+    "key": "cluster",
+    "arn": "arn:${Partition}:pcs:${Region}:${Account}:cluster/${ClusterIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "computenodegroup": {
+    "key": "computenodegroup",
+    "arn": "arn:${Partition}:pcs:${Region}:${Account}:cluster/${ClusterIdentifier}/computenodegroup/${ComputeNodeGroupIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "queue": {
+    "key": "queue",
+    "arn": "arn:${Partition}:pcs:${Region}:${Account}:cluster/${ClusterIdentifier}/queue/${QueueIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/wisdom.json

@@ -20,6 +20,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "contentassociation": {
+    "key": "ContentAssociation",
+    "arn": "arn:${Partition}:wisdom:${Region}:${Account}:content-association/${KnowledgeBaseId}/${ContentId}/${ContentAssociationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "knowledgebase": {
     "key": "KnowledgeBase",
     "arn": "arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}",
@@ -40,12 +47,5 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
-  },
-  "contentassociation": {
-    "key": "ContentAssociation",
-    "arn": "arn:${Partition}:wisdom:${Region}:${Account}:content-association/${KnowledgeBaseId}/${ContentId}/${ContentAssociationId}",
-    "conditionKeys": [
-      "aws:ResourceTag/${TagKey}"
-    ]
   }
 }

package/data/serviceNames.json

@@ -47,7 +47,7 @@
   "batch": "AWS Batch",
   "bcm-data-exports": "AWS Billing And Cost Management Data Exports",
   "bedrock": "Amazon Bedrock",
-  "billing": "AWS Billing and Cost Management",
+  "billing": "AWS Billing",
   "billingconductor": "AWS Billing Conductor",
   "braket": "Amazon Braket",
   "budgets": "AWS Budget Service",
@@ -273,6 +273,7 @@
   "payments": "AWS Payments",
   "pca-connector-ad": "AWS Private CA Connector for Active Directory",
   "pca-connector-scep": "AWS Private CA Connector for SCEP",
+  "pcs": "AWS Parallel Computing Service",
   "personalize": "Amazon Personalize",
   "pi": "AWS Performance Insights",
   "pipes": "Amazon EventBridge Pipes",
@@ -392,7 +393,7 @@
   "wam": "Amazon WorkSpaces Application Manager",
   "wellarchitected": "AWS Well-Architected Tool",
   "wickr": "AWS Wickr",
-  "wisdom": "Amazon Connect Wisdom",
+  "wisdom": "Amazon Q in Connect",
   "workdocs": "Amazon WorkDocs",
   "worklink": "Amazon WorkLink",
   "workmail": "Amazon WorkMail",

package/data/services.json

@@ -273,6 +273,7 @@
   "payments",
   "pca-connector-ad",
   "pca-connector-scep",
+  "pcs",
   "personalize",
   "pi",
   "pipes",

package/dist/cjs/actions.d.ts

@@ -18,7 +18,7 @@ interface Action {
  * @param serviceKey the service key to get actions for, is case insensitive
  * @returns the actions for the service
  */
-export declare function iamActionsForService(serviceKey: string): string[];
+export declare function iamActionsForService(serviceKey: string): Promise<string[]>;
 /**
  * Check if an action exists
  *
@@ -26,7 +26,7 @@ export declare function iamActionsForService(serviceKey: string): string[];
  * @param actionKey the action key to check for, is case insensitive
  * @returns true if the action exists, false otherwise
  */
-export declare function iamActionExists(serviceKey: string, actionKey: string): boolean;
+export declare function iamActionExists(serviceKey: string, actionKey: string): Promise<boolean>;
 /**
  * Get the details for an action
  *
@@ -35,6 +35,6 @@ export declare function iamActionExists(serviceKey: string, actionKey: string):
  * @throws error if the service or action does not exist
  * @returns the details for the action
  */
-export declare function iamActionDetails(serviceKey: string, actionKey: string): Action;
+export declare function iamActionDetails(serviceKey: string, actionKey: string): Promise<Action>;
 export {};
 //# sourceMappingURL=actions.d.ts.map

package/dist/cjs/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED,UAAU,MAAM;IACd,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,kBAAkB,EAAE,CAAC;IACtC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAGjE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAG9E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM9E"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/actions.ts"],"names":[],"mappings":"AAEA,UAAU,kBAAkB;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED,UAAU,MAAM;IACd,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACrD,eAAe,EAAE,kBAAkB,EAAE,CAAC;IACtC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAA;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAGhF;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7F;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7F"}