@cloud-copilot/iam-data 0.21.202610201 → 0.21.202610271

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (55) hide show
  1. package/data/actions/aoss.json +214 -11
  2. package/data/actions/assurance.json +1610 -0
  3. package/data/actions/bedrock.json +112 -0
  4. package/data/actions/billing.json +122 -2
  5. package/data/actions/continuum.json +526 -0
  6. package/data/actions/datasync.json +78 -6
  7. package/data/actions/dynamodb.json +15 -0
  8. package/data/actions/ecr.json +32 -0
  9. package/data/actions/es.json +96 -2
  10. package/data/actions/finspace.json +301 -122
  11. package/data/actions/identitystore.json +3 -1
  12. package/data/actions/ivs.json +104 -0
  13. package/data/actions/kafka.json +12 -0
  14. package/data/actions/kms.json +54 -2
  15. package/data/actions/network-firewall.json +325 -1
  16. package/data/actions/networkmanager.json +30 -0
  17. package/data/actions/rds-db.json +4 -2
  18. package/data/actions/rds.json +124 -0
  19. package/data/actions/redshift-serverless.json +15 -0
  20. package/data/actions/redshift.json +15 -0
  21. package/data/actions/route53resolver.json +15 -0
  22. package/data/actions/securityagent.json +0 -15
  23. package/data/actions/signin.json +5 -5
  24. package/data/actions/tnb.json +179 -115
  25. package/data/actions/transcribe.json +15 -0
  26. package/data/actions/wisdom.json +30 -0
  27. package/data/actions/xray.json +8 -0
  28. package/data/categories/developer-tools.json +1 -1
  29. package/data/categories/security-identity-and-compliance.json +1 -0
  30. package/data/conditionKeys/aoss.json +5 -0
  31. package/data/conditionKeys/assurance.json +17 -0
  32. package/data/conditionKeys/continuum.json +22 -0
  33. package/data/conditionKeys/es.json +10 -0
  34. package/data/conditionKeys/glacier.json +5 -0
  35. package/data/conditionKeys/identitystore.json +5 -0
  36. package/data/conditionKeys/kms.json +5 -0
  37. package/data/conditionKeys/rds-db.json +7 -1
  38. package/data/conditionKeys/secretsmanager.json +5 -0
  39. package/data/conditionPatterns.json +9 -3
  40. package/data/resourceTypes/aoss.json +14 -0
  41. package/data/resourceTypes/assurance.json +9 -0
  42. package/data/resourceTypes/bedrock.json +7 -0
  43. package/data/resourceTypes/billing.json +4 -0
  44. package/data/resourceTypes/continuum.json +26 -0
  45. package/data/resourceTypes/ivs.json +7 -0
  46. package/data/resourceTypes/network-firewall.json +21 -0
  47. package/data/resourceTypes/rds-db.json +4 -1
  48. package/data/resourceTypes/rds.json +7 -0
  49. package/data/serviceCategories.json +2 -1
  50. package/data/serviceNames.json +2 -1
  51. package/data/services.json +2 -1
  52. package/package.json +2 -2
  53. package/data/actions/codestar.json +0 -337
  54. package/data/conditionKeys/codestar.json +0 -22
  55. package/data/resourceTypes/codestar.json +0 -16
package/data/actions/identitystore.json CHANGED
@@ -618,7 +618,9 @@
618
618
  "dependentActions": []
619
619
  }
620
620
  ],
621
- "conditionKeys": [],
621
+ "conditionKeys": [
622
+ "identitystore:VpceAccessRequired"
623
+ ],
622
624
  "dependentActions": []
623
625
  },
624
626
  "updateuser": {
package/data/actions/ivs.json CHANGED
@@ -104,6 +104,24 @@
104
104
  ],
105
105
  "dependentActions": []
106
106
  },
107
+ "createfailoverslateconfiguration": {
108
+ "name": "CreateFailoverSlateConfiguration",
109
+ "description": "Grants permission to create a new failover slate configuration",
110
+ "accessLevel": "Write",
111
+ "resourceTypes": [
112
+ {
113
+ "name": "Failover-Slate-Configuration",
114
+ "required": true,
115
+ "conditionKeys": [],
116
+ "dependentActions": []
117
+ }
118
+ ],
119
+ "conditionKeys": [
120
+ "aws:RequestTag/${TagKey}",
121
+ "aws:TagKeys"
122
+ ],
123
+ "dependentActions": []
124
+ },
107
125
  "createingestconfiguration": {
108
126
  "name": "CreateIngestConfiguration",
109
127
  "description": "Grants permission to create a new ingest configuration",
@@ -281,6 +299,21 @@
281
299
  "conditionKeys": [],
282
300
  "dependentActions": []
283
301
  },
302
+ "deletefailoverslateconfiguration": {
303
+ "name": "DeleteFailoverSlateConfiguration",
304
+ "description": "Grants permission to delete a failover slate configuration for the specified ARN",
305
+ "accessLevel": "Write",
306
+ "resourceTypes": [
307
+ {
308
+ "name": "Failover-Slate-Configuration",
309
+ "required": true,
310
+ "conditionKeys": [],
311
+ "dependentActions": []
312
+ }
313
+ ],
314
+ "conditionKeys": [],
315
+ "dependentActions": []
316
+ },
284
317
  "deleteingestconfiguration": {
285
318
  "name": "DeleteIngestConfiguration",
286
319
  "description": "Grants permission to delete an ingest configuration for the specified ARN",
@@ -476,6 +509,21 @@
476
509
  "conditionKeys": [],
477
510
  "dependentActions": []
478
511
  },
512
+ "getfailoverslateconfiguration": {
513
+ "name": "GetFailoverSlateConfiguration",
514
+ "description": "Grants permission to get the failover slate configuration for the specified ARN",
515
+ "accessLevel": "Read",
516
+ "resourceTypes": [
517
+ {
518
+ "name": "Failover-Slate-Configuration",
519
+ "required": true,
520
+ "conditionKeys": [],
521
+ "dependentActions": []
522
+ }
523
+ ],
524
+ "conditionKeys": [],
525
+ "dependentActions": []
526
+ },
479
527
  "getingestconfiguration": {
480
528
  "name": "GetIngestConfiguration",
481
529
  "description": "Grants permission to get the ingest configuration for the specified ARN",
@@ -759,6 +807,21 @@
759
807
  "conditionKeys": [],
760
808
  "dependentActions": []
761
809
  },
810
+ "listfailoverslateconfigurations": {
811
+ "name": "ListFailoverSlateConfigurations",
812
+ "description": "Grants permission to get summary information about failover slate configurations",
813
+ "accessLevel": "List",
814
+ "resourceTypes": [
815
+ {
816
+ "name": "Failover-Slate-Configuration",
817
+ "required": true,
818
+ "conditionKeys": [],
819
+ "dependentActions": []
820
+ }
821
+ ],
822
+ "conditionKeys": [],
823
+ "dependentActions": []
824
+ },
762
825
  "listingestconfigurations": {
763
826
  "name": "ListIngestConfigurations",
764
827
  "description": "Grants permission to get summary information about ingest configurations",
@@ -976,6 +1039,12 @@
976
1039
  "conditionKeys": [],
977
1040
  "dependentActions": []
978
1041
  },
1042
+ {
1043
+ "name": "Failover-Slate-Configuration",
1044
+ "required": false,
1045
+ "conditionKeys": [],
1046
+ "dependentActions": []
1047
+ },
979
1048
  {
980
1049
  "name": "Ingest-Configuration",
981
1050
  "required": false,
@@ -1046,6 +1115,14 @@
1046
1115
  "conditionKeys": [],
1047
1116
  "dependentActions": []
1048
1117
  },
1118
+ "revokeconnectiontoken": {
1119
+ "name": "RevokeConnectionToken",
1120
+ "description": "Grants permission to revoke connection token for a specified token ID",
1121
+ "accessLevel": "Write",
1122
+ "resourceTypes": [],
1123
+ "conditionKeys": [],
1124
+ "dependentActions": []
1125
+ },
1049
1126
  "startcomposition": {
1050
1127
  "name": "StartComposition",
1051
1128
  "description": "Grants permission to start a new composition",
@@ -1189,6 +1266,12 @@
1189
1266
  "conditionKeys": [],
1190
1267
  "dependentActions": []
1191
1268
  },
1269
+ {
1270
+ "name": "Failover-Slate-Configuration",
1271
+ "required": false,
1272
+ "conditionKeys": [],
1273
+ "dependentActions": []
1274
+ },
1192
1275
  {
1193
1276
  "name": "Ingest-Configuration",
1194
1277
  "required": false,
@@ -1273,6 +1356,12 @@
1273
1356
  "conditionKeys": [],
1274
1357
  "dependentActions": []
1275
1358
  },
1359
+ {
1360
+ "name": "Failover-Slate-Configuration",
1361
+ "required": false,
1362
+ "conditionKeys": [],
1363
+ "dependentActions": []
1364
+ },
1276
1365
  {
1277
1366
  "name": "Ingest-Configuration",
1278
1367
  "required": false,
@@ -1350,6 +1439,21 @@
1350
1439
  "conditionKeys": [],
1351
1440
  "dependentActions": []
1352
1441
  },
1442
+ "updatefailoverslateconfiguration": {
1443
+ "name": "UpdateFailoverSlateConfiguration",
1444
+ "description": "Grants permission to update a failover slate configuration for the specified ARN",
1445
+ "accessLevel": "Write",
1446
+ "resourceTypes": [
1447
+ {
1448
+ "name": "Failover-Slate-Configuration",
1449
+ "required": true,
1450
+ "conditionKeys": [],
1451
+ "dependentActions": []
1452
+ }
1453
+ ],
1454
+ "conditionKeys": [],
1455
+ "dependentActions": []
1456
+ },
1353
1457
  "updateingestconfiguration": {
1354
1458
  "name": "UpdateIngestConfiguration",
1355
1459
  "description": "Grants permission to update ingest configuration for a specified ARN",
package/data/actions/kafka.json CHANGED
@@ -57,6 +57,12 @@
57
57
  "required": true,
58
58
  "conditionKeys": [],
59
59
  "dependentActions": []
60
+ },
61
+ {
62
+ "name": "configuration",
63
+ "required": false,
64
+ "conditionKeys": [],
65
+ "dependentActions": []
60
66
  }
61
67
  ],
62
68
  "conditionKeys": [
@@ -75,6 +81,12 @@
75
81
  "required": true,
76
82
  "conditionKeys": [],
77
83
  "dependentActions": []
84
+ },
85
+ {
86
+ "name": "configuration",
87
+ "required": false,
88
+ "conditionKeys": [],
89
+ "dependentActions": []
78
90
  }
79
91
  ],
80
92
  "conditionKeys": [
package/data/actions/kms.json CHANGED
@@ -124,6 +124,26 @@
124
124
  ],
125
125
  "dependentActions": []
126
126
  },
127
+ "decapsulate": {
128
+ "name": "Decapsulate",
129
+ "description": "Controls permission to use the specified AWS KMS key to recover the plaintext shared secret from its encapsulated (ciphertext) form",
130
+ "accessLevel": "Write",
131
+ "resourceTypes": [
132
+ {
133
+ "name": "key",
134
+ "required": true,
135
+ "conditionKeys": [],
136
+ "dependentActions": []
137
+ }
138
+ ],
139
+ "conditionKeys": [
140
+ "kms:CallerAccount",
141
+ "kms:EncapsulationAlgorithm",
142
+ "kms:RequestAlias",
143
+ "kms:ViaService"
144
+ ],
145
+ "dependentActions": []
146
+ },
127
147
  "decrypt": {
128
148
  "name": "Decrypt",
129
149
  "description": "Controls permission to decrypt ciphertext that was encrypted under an AWS KMS key",
@@ -197,6 +217,7 @@
197
217
  "kms:RecipientAttestation:PCR6",
198
218
  "kms:RecipientAttestation:PCR7",
199
219
  "kms:RecipientAttestation:PCR8",
220
+ "kms:RecipientAttestation:PCR8:ServiceName",
200
221
  "kms:RecipientAttestation:PCR9",
201
222
  "kms:RequestAlias",
202
223
  "kms:ViaService"
@@ -326,6 +347,7 @@
326
347
  "kms:RecipientAttestation:PCR6",
327
348
  "kms:RecipientAttestation:PCR7",
328
349
  "kms:RecipientAttestation:PCR8",
350
+ "kms:RecipientAttestation:PCR8:ServiceName",
329
351
  "kms:RecipientAttestation:PCR9",
330
352
  "kms:RequestAlias",
331
353
  "kms:ViaService"
@@ -445,6 +467,26 @@
445
467
  ],
446
468
  "dependentActions": []
447
469
  },
470
+ "encapsulate": {
471
+ "name": "Encapsulate",
472
+ "description": "Controls permission to use the specified AWS KMS key to generate a shared secret and its encapsulated (ciphertext) form",
473
+ "accessLevel": "Write",
474
+ "resourceTypes": [
475
+ {
476
+ "name": "key",
477
+ "required": true,
478
+ "conditionKeys": [],
479
+ "dependentActions": []
480
+ }
481
+ ],
482
+ "conditionKeys": [
483
+ "kms:CallerAccount",
484
+ "kms:EncapsulationAlgorithm",
485
+ "kms:RequestAlias",
486
+ "kms:ViaService"
487
+ ],
488
+ "dependentActions": []
489
+ },
448
490
  "encrypt": {
449
491
  "name": "Encrypt",
450
492
  "description": "Controls permission to use the specified AWS KMS key to encrypt data and data keys",
@@ -540,6 +582,7 @@
540
582
  "kms:RecipientAttestation:PCR6",
541
583
  "kms:RecipientAttestation:PCR7",
542
584
  "kms:RecipientAttestation:PCR8",
585
+ "kms:RecipientAttestation:PCR8:ServiceName",
543
586
  "kms:RecipientAttestation:PCR9",
544
587
  "kms:RequestAlias",
545
588
  "kms:ViaService"
@@ -620,6 +663,7 @@
620
663
  "kms:RecipientAttestation:PCR6",
621
664
  "kms:RecipientAttestation:PCR7",
622
665
  "kms:RecipientAttestation:PCR8",
666
+ "kms:RecipientAttestation:PCR8:ServiceName",
623
667
  "kms:RecipientAttestation:PCR9",
624
668
  "kms:RequestAlias",
625
669
  "kms:ViaService"
@@ -697,6 +741,7 @@
697
741
  "accessLevel": "Write",
698
742
  "resourceTypes": [],
699
743
  "conditionKeys": [
744
+ "kms:CallerAccount",
700
745
  "kms:RecipientAttestation:ImageSha384",
701
746
  "kms:RecipientAttestation:NitroTPMPCR0",
702
747
  "kms:RecipientAttestation:NitroTPMPCR1",
@@ -753,6 +798,7 @@
753
798
  "kms:RecipientAttestation:PCR6",
754
799
  "kms:RecipientAttestation:PCR7",
755
800
  "kms:RecipientAttestation:PCR8",
801
+ "kms:RecipientAttestation:PCR8:ServiceName",
756
802
  "kms:RecipientAttestation:PCR9"
757
803
  ],
758
804
  "dependentActions": []
@@ -875,7 +921,10 @@
875
921
  "description": "Controls permission to view the aliases that are defined in the account. Aliases are optional friendly names that you can associate with AWS KMS keys",
876
922
  "accessLevel": "List",
877
923
  "resourceTypes": [],
878
- "conditionKeys": [],
924
+ "conditionKeys": [
925
+ "kms:CallerAccount",
926
+ "kms:ViaService"
927
+ ],
879
928
  "dependentActions": []
880
929
  },
881
930
  "listgrants": {
@@ -938,7 +987,10 @@
938
987
  "description": "Controls permission to view the key ID and Amazon Resource Name (ARN) of all AWS KMS keys in the account",
939
988
  "accessLevel": "List",
940
989
  "resourceTypes": [],
941
- "conditionKeys": [],
990
+ "conditionKeys": [
991
+ "kms:CallerAccount",
992
+ "kms:ViaService"
993
+ ],
942
994
  "dependentActions": []
943
995
  },
944
996
  "listresourcetags": {