@cloud-copilot/iam-data 0.21.202610201 → 0.21.202610271

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (55) hide show
  1. package/data/actions/aoss.json +214 -11
  2. package/data/actions/assurance.json +1610 -0
  3. package/data/actions/bedrock.json +112 -0
  4. package/data/actions/billing.json +122 -2
  5. package/data/actions/continuum.json +526 -0
  6. package/data/actions/datasync.json +78 -6
  7. package/data/actions/dynamodb.json +15 -0
  8. package/data/actions/ecr.json +32 -0
  9. package/data/actions/es.json +96 -2
  10. package/data/actions/finspace.json +301 -122
  11. package/data/actions/identitystore.json +3 -1
  12. package/data/actions/ivs.json +104 -0
  13. package/data/actions/kafka.json +12 -0
  14. package/data/actions/kms.json +54 -2
  15. package/data/actions/network-firewall.json +325 -1
  16. package/data/actions/networkmanager.json +30 -0
  17. package/data/actions/rds-db.json +4 -2
  18. package/data/actions/rds.json +124 -0
  19. package/data/actions/redshift-serverless.json +15 -0
  20. package/data/actions/redshift.json +15 -0
  21. package/data/actions/route53resolver.json +15 -0
  22. package/data/actions/securityagent.json +0 -15
  23. package/data/actions/signin.json +5 -5
  24. package/data/actions/tnb.json +179 -115
  25. package/data/actions/transcribe.json +15 -0
  26. package/data/actions/wisdom.json +30 -0
  27. package/data/actions/xray.json +8 -0
  28. package/data/categories/developer-tools.json +1 -1
  29. package/data/categories/security-identity-and-compliance.json +1 -0
  30. package/data/conditionKeys/aoss.json +5 -0
  31. package/data/conditionKeys/assurance.json +17 -0
  32. package/data/conditionKeys/continuum.json +22 -0
  33. package/data/conditionKeys/es.json +10 -0
  34. package/data/conditionKeys/glacier.json +5 -0
  35. package/data/conditionKeys/identitystore.json +5 -0
  36. package/data/conditionKeys/kms.json +5 -0
  37. package/data/conditionKeys/rds-db.json +7 -1
  38. package/data/conditionKeys/secretsmanager.json +5 -0
  39. package/data/conditionPatterns.json +9 -3
  40. package/data/resourceTypes/aoss.json +14 -0
  41. package/data/resourceTypes/assurance.json +9 -0
  42. package/data/resourceTypes/bedrock.json +7 -0
  43. package/data/resourceTypes/billing.json +4 -0
  44. package/data/resourceTypes/continuum.json +26 -0
  45. package/data/resourceTypes/ivs.json +7 -0
  46. package/data/resourceTypes/network-firewall.json +21 -0
  47. package/data/resourceTypes/rds-db.json +4 -1
  48. package/data/resourceTypes/rds.json +7 -0
  49. package/data/serviceCategories.json +2 -1
  50. package/data/serviceNames.json +2 -1
  51. package/data/services.json +2 -1
  52. package/package.json +2 -2
  53. package/data/actions/codestar.json +0 -337
  54. package/data/conditionKeys/codestar.json +0 -22
  55. package/data/resourceTypes/codestar.json +0 -16
package/data/actions/network-firewall.json CHANGED
@@ -45,6 +45,12 @@
45
45
  "required": true,
46
46
  "conditionKeys": [],
47
47
  "dependentActions": []
48
+ },
49
+ {
50
+ "name": "FirewallPolicyV2",
51
+ "required": true,
52
+ "conditionKeys": [],
53
+ "dependentActions": []
48
54
  }
49
55
  ],
50
56
  "conditionKeys": [
@@ -120,7 +126,13 @@
120
126
  },
121
127
  {
122
128
  "name": "FirewallPolicy",
123
- "required": true,
129
+ "required": false,
130
+ "conditionKeys": [],
131
+ "dependentActions": []
132
+ },
133
+ {
134
+ "name": "FirewallPolicyV2",
135
+ "required": false,
124
136
  "conditionKeys": [],
125
137
  "dependentActions": []
126
138
  }
@@ -167,6 +179,42 @@
167
179
  ],
168
180
  "dependentActions": []
169
181
  },
182
+ "createfirewallpolicyv2": {
183
+ "name": "CreateFirewallPolicyV2",
184
+ "description": "Grants permission to create an AWS Network Firewall firewall policy v2",
185
+ "accessLevel": "Write",
186
+ "resourceTypes": [
187
+ {
188
+ "name": "FirewallPolicyV2",
189
+ "required": true,
190
+ "conditionKeys": [],
191
+ "dependentActions": []
192
+ },
193
+ {
194
+ "name": "FirewallRuleGroup",
195
+ "required": false,
196
+ "conditionKeys": [],
197
+ "dependentActions": []
198
+ },
199
+ {
200
+ "name": "IpsRuleGroup",
201
+ "required": false,
202
+ "conditionKeys": [],
203
+ "dependentActions": []
204
+ },
205
+ {
206
+ "name": "TLSInspectionConfiguration",
207
+ "required": false,
208
+ "conditionKeys": [],
209
+ "dependentActions": []
210
+ }
211
+ ],
212
+ "conditionKeys": [
213
+ "aws:RequestTag/${TagKey}",
214
+ "aws:TagKeys"
215
+ ],
216
+ "dependentActions": []
217
+ },
170
218
  "createproxy": {
171
219
  "name": "CreateProxy",
172
220
  "description": "Grants permission to create an AWS Network Firewall proxy",
@@ -253,6 +301,18 @@
253
301
  "description": "Grants permission to create an AWS Network Firewall rule group",
254
302
  "accessLevel": "Write",
255
303
  "resourceTypes": [
304
+ {
305
+ "name": "FirewallRuleGroup",
306
+ "required": false,
307
+ "conditionKeys": [],
308
+ "dependentActions": []
309
+ },
310
+ {
311
+ "name": "IpsRuleGroup",
312
+ "required": false,
313
+ "conditionKeys": [],
314
+ "dependentActions": []
315
+ },
256
316
  {
257
317
  "name": "StatefulRuleGroup",
258
318
  "required": false,
@@ -359,6 +419,21 @@
359
419
  "conditionKeys": [],
360
420
  "dependentActions": []
361
421
  },
422
+ "deletefirewallpolicyv2": {
423
+ "name": "DeleteFirewallPolicyV2",
424
+ "description": "Grants permission to delete a firewall policy v2",
425
+ "accessLevel": "Write",
426
+ "resourceTypes": [
427
+ {
428
+ "name": "FirewallPolicyV2",
429
+ "required": true,
430
+ "conditionKeys": [],
431
+ "dependentActions": []
432
+ }
433
+ ],
434
+ "conditionKeys": [],
435
+ "dependentActions": []
436
+ },
362
437
  "deletenetworkfirewalltransitgatewayattachment": {
363
438
  "name": "DeleteNetworkFirewallTransitGatewayAttachment",
364
439
  "description": "Grants permission to delete Network Firewall attachments on a transit gateway",
@@ -451,6 +526,24 @@
451
526
  "conditionKeys": [],
452
527
  "dependentActions": []
453
528
  },
529
+ {
530
+ "name": "FirewallPolicyV2",
531
+ "required": false,
532
+ "conditionKeys": [],
533
+ "dependentActions": []
534
+ },
535
+ {
536
+ "name": "FirewallRuleGroup",
537
+ "required": false,
538
+ "conditionKeys": [],
539
+ "dependentActions": []
540
+ },
541
+ {
542
+ "name": "IpsRuleGroup",
543
+ "required": false,
544
+ "conditionKeys": [],
545
+ "dependentActions": []
546
+ },
454
547
  {
455
548
  "name": "StatefulRuleGroup",
456
549
  "required": false,
@@ -472,6 +565,18 @@
472
565
  "description": "Grants permission to delete a rule group",
473
566
  "accessLevel": "Write",
474
567
  "resourceTypes": [
568
+ {
569
+ "name": "FirewallRuleGroup",
570
+ "required": true,
571
+ "conditionKeys": [],
572
+ "dependentActions": []
573
+ },
574
+ {
575
+ "name": "IpsRuleGroup",
576
+ "required": true,
577
+ "conditionKeys": [],
578
+ "dependentActions": []
579
+ },
475
580
  {
476
581
  "name": "StatefulRuleGroup",
477
582
  "required": true,
@@ -596,6 +701,39 @@
596
701
  "conditionKeys": [],
597
702
  "dependentActions": []
598
703
  },
704
+ "describefirewallpolicyv2": {
705
+ "name": "DescribeFirewallPolicyV2",
706
+ "description": "Grants permission to retrieve the data objects that define a firewall policy v2",
707
+ "accessLevel": "Read",
708
+ "resourceTypes": [
709
+ {
710
+ "name": "FirewallPolicyV2",
711
+ "required": true,
712
+ "conditionKeys": [],
713
+ "dependentActions": []
714
+ },
715
+ {
716
+ "name": "FirewallRuleGroup",
717
+ "required": false,
718
+ "conditionKeys": [],
719
+ "dependentActions": []
720
+ },
721
+ {
722
+ "name": "IpsRuleGroup",
723
+ "required": false,
724
+ "conditionKeys": [],
725
+ "dependentActions": []
726
+ },
727
+ {
728
+ "name": "TLSInspectionConfiguration",
729
+ "required": false,
730
+ "conditionKeys": [],
731
+ "dependentActions": []
732
+ }
733
+ ],
734
+ "conditionKeys": [],
735
+ "dependentActions": []
736
+ },
599
737
  "describeflowoperation": {
600
738
  "name": "DescribeFlowOperation",
601
739
  "description": "Grants permission to describe a flow operation performed on a firewall",
@@ -703,6 +841,24 @@
703
841
  "conditionKeys": [],
704
842
  "dependentActions": []
705
843
  },
844
+ {
845
+ "name": "FirewallPolicyV2",
846
+ "required": false,
847
+ "conditionKeys": [],
848
+ "dependentActions": []
849
+ },
850
+ {
851
+ "name": "FirewallRuleGroup",
852
+ "required": false,
853
+ "conditionKeys": [],
854
+ "dependentActions": []
855
+ },
856
+ {
857
+ "name": "IpsRuleGroup",
858
+ "required": false,
859
+ "conditionKeys": [],
860
+ "dependentActions": []
861
+ },
706
862
  {
707
863
  "name": "StatefulRuleGroup",
708
864
  "required": false,
@@ -724,6 +880,18 @@
724
880
  "description": "Grants permission to retrieve the data objects that define a rule group",
725
881
  "accessLevel": "Read",
726
882
  "resourceTypes": [
883
+ {
884
+ "name": "FirewallRuleGroup",
885
+ "required": false,
886
+ "conditionKeys": [],
887
+ "dependentActions": []
888
+ },
889
+ {
890
+ "name": "IpsRuleGroup",
891
+ "required": false,
892
+ "conditionKeys": [],
893
+ "dependentActions": []
894
+ },
727
895
  {
728
896
  "name": "StatefulRuleGroup",
729
897
  "required": false,
@@ -745,6 +913,18 @@
745
913
  "description": "Grants permission to retrieve the high-level information about a rule group",
746
914
  "accessLevel": "Read",
747
915
  "resourceTypes": [
916
+ {
917
+ "name": "FirewallRuleGroup",
918
+ "required": false,
919
+ "conditionKeys": [],
920
+ "dependentActions": []
921
+ },
922
+ {
923
+ "name": "IpsRuleGroup",
924
+ "required": false,
925
+ "conditionKeys": [],
926
+ "dependentActions": []
927
+ },
748
928
  {
749
929
  "name": "StatefulRuleGroup",
750
930
  "required": false,
@@ -766,6 +946,18 @@
766
946
  "description": "Grants permission to retrieve the summary information about a rule group",
767
947
  "accessLevel": "Read",
768
948
  "resourceTypes": [
949
+ {
950
+ "name": "FirewallRuleGroup",
951
+ "required": false,
952
+ "conditionKeys": [],
953
+ "dependentActions": []
954
+ },
955
+ {
956
+ "name": "IpsRuleGroup",
957
+ "required": false,
958
+ "conditionKeys": [],
959
+ "dependentActions": []
960
+ },
769
961
  {
770
962
  "name": "StatefulRuleGroup",
771
963
  "required": false,
@@ -916,6 +1108,21 @@
916
1108
  "conditionKeys": [],
917
1109
  "dependentActions": []
918
1110
  },
1111
+ "listfirewallpoliciesv2": {
1112
+ "name": "ListFirewallPoliciesV2",
1113
+ "description": "Grants permission to retrieve the metadata for firewall policies v2",
1114
+ "accessLevel": "List",
1115
+ "resourceTypes": [
1116
+ {
1117
+ "name": "FirewallPolicyV2",
1118
+ "required": true,
1119
+ "conditionKeys": [],
1120
+ "dependentActions": []
1121
+ }
1122
+ ],
1123
+ "conditionKeys": [],
1124
+ "dependentActions": []
1125
+ },
919
1126
  "listfirewalls": {
920
1127
  "name": "ListFirewalls",
921
1128
  "description": "Grants permission to retrieve the metadata for firewalls",
@@ -1052,6 +1259,24 @@
1052
1259
  "conditionKeys": [],
1053
1260
  "dependentActions": []
1054
1261
  },
1262
+ {
1263
+ "name": "FirewallPolicyV2",
1264
+ "required": true,
1265
+ "conditionKeys": [],
1266
+ "dependentActions": []
1267
+ },
1268
+ {
1269
+ "name": "FirewallRuleGroup",
1270
+ "required": false,
1271
+ "conditionKeys": [],
1272
+ "dependentActions": []
1273
+ },
1274
+ {
1275
+ "name": "IpsRuleGroup",
1276
+ "required": false,
1277
+ "conditionKeys": [],
1278
+ "dependentActions": []
1279
+ },
1055
1280
  {
1056
1281
  "name": "StatefulRuleGroup",
1057
1282
  "required": false,
@@ -1112,6 +1337,24 @@
1112
1337
  "conditionKeys": [],
1113
1338
  "dependentActions": []
1114
1339
  },
1340
+ {
1341
+ "name": "FirewallPolicyV2",
1342
+ "required": false,
1343
+ "conditionKeys": [],
1344
+ "dependentActions": []
1345
+ },
1346
+ {
1347
+ "name": "FirewallRuleGroup",
1348
+ "required": false,
1349
+ "conditionKeys": [],
1350
+ "dependentActions": []
1351
+ },
1352
+ {
1353
+ "name": "IpsRuleGroup",
1354
+ "required": false,
1355
+ "conditionKeys": [],
1356
+ "dependentActions": []
1357
+ },
1115
1358
  {
1116
1359
  "name": "StatefulRuleGroup",
1117
1360
  "required": false,
@@ -1211,6 +1454,24 @@
1211
1454
  "conditionKeys": [],
1212
1455
  "dependentActions": []
1213
1456
  },
1457
+ {
1458
+ "name": "FirewallPolicyV2",
1459
+ "required": false,
1460
+ "conditionKeys": [],
1461
+ "dependentActions": []
1462
+ },
1463
+ {
1464
+ "name": "FirewallRuleGroup",
1465
+ "required": false,
1466
+ "conditionKeys": [],
1467
+ "dependentActions": []
1468
+ },
1469
+ {
1470
+ "name": "IpsRuleGroup",
1471
+ "required": false,
1472
+ "conditionKeys": [],
1473
+ "dependentActions": []
1474
+ },
1214
1475
  {
1215
1476
  "name": "Proxy",
1216
1477
  "required": false,
@@ -1283,6 +1544,24 @@
1283
1544
  "conditionKeys": [],
1284
1545
  "dependentActions": []
1285
1546
  },
1547
+ {
1548
+ "name": "FirewallPolicyV2",
1549
+ "required": false,
1550
+ "conditionKeys": [],
1551
+ "dependentActions": []
1552
+ },
1553
+ {
1554
+ "name": "FirewallRuleGroup",
1555
+ "required": false,
1556
+ "conditionKeys": [],
1557
+ "dependentActions": []
1558
+ },
1559
+ {
1560
+ "name": "IpsRuleGroup",
1561
+ "required": false,
1562
+ "conditionKeys": [],
1563
+ "dependentActions": []
1564
+ },
1286
1565
  {
1287
1566
  "name": "Proxy",
1288
1567
  "required": false,
@@ -1469,6 +1748,39 @@
1469
1748
  "conditionKeys": [],
1470
1749
  "dependentActions": []
1471
1750
  },
1751
+ "updatefirewallpolicyv2": {
1752
+ "name": "UpdateFirewallPolicyV2",
1753
+ "description": "Grants permission to modify a firewall policy v2",
1754
+ "accessLevel": "Write",
1755
+ "resourceTypes": [
1756
+ {
1757
+ "name": "FirewallPolicyV2",
1758
+ "required": true,
1759
+ "conditionKeys": [],
1760
+ "dependentActions": []
1761
+ },
1762
+ {
1763
+ "name": "FirewallRuleGroup",
1764
+ "required": false,
1765
+ "conditionKeys": [],
1766
+ "dependentActions": []
1767
+ },
1768
+ {
1769
+ "name": "IpsRuleGroup",
1770
+ "required": false,
1771
+ "conditionKeys": [],
1772
+ "dependentActions": []
1773
+ },
1774
+ {
1775
+ "name": "TLSInspectionConfiguration",
1776
+ "required": false,
1777
+ "conditionKeys": [],
1778
+ "dependentActions": []
1779
+ }
1780
+ ],
1781
+ "conditionKeys": [],
1782
+ "dependentActions": []
1783
+ },
1472
1784
  "updateloggingconfiguration": {
1473
1785
  "name": "UpdateLoggingConfiguration",
1474
1786
  "description": "Grants permission to modify the logging configuration of a firewall",
@@ -1564,6 +1876,18 @@
1564
1876
  "description": "Grants permission to modify a rule group",
1565
1877
  "accessLevel": "Write",
1566
1878
  "resourceTypes": [
1879
+ {
1880
+ "name": "FirewallRuleGroup",
1881
+ "required": false,
1882
+ "conditionKeys": [],
1883
+ "dependentActions": []
1884
+ },
1885
+ {
1886
+ "name": "IpsRuleGroup",
1887
+ "required": false,
1888
+ "conditionKeys": [],
1889
+ "dependentActions": []
1890
+ },
1567
1891
  {
1568
1892
  "name": "StatefulRuleGroup",
1569
1893
  "required": false,
package/data/actions/networkmanager.json CHANGED
@@ -1149,6 +1149,21 @@
1149
1149
  "conditionKeys": [],
1150
1150
  "dependentActions": []
1151
1151
  },
1152
+ "listattachmentnatconfigurations": {
1153
+ "name": "ListAttachmentNatConfigurations",
1154
+ "description": "Grants permission to list the NAT configurations of attachments",
1155
+ "accessLevel": "List",
1156
+ "resourceTypes": [
1157
+ {
1158
+ "name": "attachment",
1159
+ "required": true,
1160
+ "conditionKeys": [],
1161
+ "dependentActions": []
1162
+ }
1163
+ ],
1164
+ "conditionKeys": [],
1165
+ "dependentActions": []
1166
+ },
1152
1167
  "listattachmentroutingpolicyassociations": {
1153
1168
  "name": "ListAttachmentRoutingPolicyAssociations",
1154
1169
  "description": "Grants permission to list all routing policies associated to core network attachments",
@@ -1602,6 +1617,21 @@
1602
1617
  ],
1603
1618
  "dependentActions": []
1604
1619
  },
1620
+ "updateattachmentnatconfiguration": {
1621
+ "name": "UpdateAttachmentNatConfiguration",
1622
+ "description": "Grants permission to update the NAT configuration of an attachment",
1623
+ "accessLevel": "Write",
1624
+ "resourceTypes": [
1625
+ {
1626
+ "name": "attachment",
1627
+ "required": true,
1628
+ "conditionKeys": [],
1629
+ "dependentActions": []
1630
+ }
1631
+ ],
1632
+ "conditionKeys": [],
1633
+ "dependentActions": []
1634
+ },
1605
1635
  "updateconnection": {
1606
1636
  "name": "UpdateConnection",
1607
1637
  "description": "Grants permission to update a connection",
package/data/actions/rds-db.json CHANGED
@@ -1,13 +1,15 @@
1
1
  {
2
2
  "connect": {
3
3
  "name": "connect",
4
- "description": "Allows IAM role or user to connect to RDS database",
4
+ "description": "Grants permission to connect to an RDS database from an IAM role or user",
5
5
  "accessLevel": "Permissions management, Write",
6
6
  "resourceTypes": [
7
7
  {
8
8
  "name": "db-user",
9
9
  "required": true,
10
- "conditionKeys": [],
10
+ "conditionKeys": [
11
+ "aws:ResourceTag/${TagKey}"
12
+ ],
11
13
  "dependentActions": []
12
14
  }
13
15
  ],