@cloud-copilot/iam-data 0.22.202610271 → 0.22.202610281

package/data/actions/ecr.json

@@ -57,7 +57,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "batchdeleteimage": {
     "name": "BatchDeleteImage",
@@ -72,7 +73,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "batchgetimage": {
     "name": "BatchGetImage",
@@ -87,7 +89,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "batchgetrepositoryscanningconfiguration": {
     "name": "BatchGetRepositoryScanningConfiguration",
@@ -102,7 +105,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "completelayerupload": {
     "name": "CompleteLayerUpload",
@@ -117,7 +121,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createpullthroughcacherule": {
     "name": "CreatePullThroughCacheRule",
@@ -143,7 +148,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createrepositorycreationtemplate": {
     "name": "CreateRepositoryCreationTemplate",
@@ -166,7 +172,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletepullthroughcacherule": {
     "name": "DeletePullThroughCacheRule",
@@ -197,7 +204,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deleterepositorycreationtemplate": {
     "name": "DeleteRepositoryCreationTemplate",
@@ -220,7 +228,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletesigningconfiguration": {
     "name": "DeleteSigningConfiguration",
@@ -251,7 +260,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describeimagescanfindings": {
     "name": "DescribeImageScanFindings",
@@ -266,7 +276,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describeimagesigningstatus": {
     "name": "DescribeImageSigningStatus",
@@ -296,7 +307,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describepullthroughcacherules": {
     "name": "DescribePullThroughCacheRules",
@@ -335,7 +347,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describerepositorycreationtemplates": {
     "name": "DescribeRepositoryCreationTemplates",
@@ -376,7 +389,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getlifecyclepolicy": {
     "name": "GetLifecyclePolicy",
@@ -391,7 +405,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getlifecyclepolicypreview": {
     "name": "GetLifecyclePolicyPreview",
@@ -406,7 +421,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getregistrypolicy": {
     "name": "GetRegistryPolicy",
@@ -437,7 +453,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getsigningconfiguration": {
     "name": "GetSigningConfiguration",
@@ -460,7 +477,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listimages": {
     "name": "ListImages",
@@ -475,7 +493,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listpulltimeupdateexclusions": {
     "name": "ListPullTimeUpdateExclusions",
@@ -509,7 +528,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putaccountsetting": {
     "name": "PutAccountSetting",
@@ -534,7 +554,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putimagescanningconfiguration": {
     "name": "PutImageScanningConfiguration",
@@ -549,7 +570,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putimagetagmutability": {
     "name": "PutImageTagMutability",
@@ -564,7 +586,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putlifecyclepolicy": {
     "name": "PutLifecyclePolicy",
@@ -579,7 +602,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putregistrypolicy": {
     "name": "PutRegistryPolicy",
@@ -634,7 +658,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "startimagescan": {
     "name": "StartImageScan",
@@ -649,7 +674,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "startlifecyclepolicypreview": {
     "name": "StartLifecyclePolicyPreview",
@@ -664,7 +690,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "startreplicationbackfill": {
     "name": "StartReplicationBackfill",
@@ -698,7 +725,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "untagresource": {
     "name": "UntagResource",
@@ -715,7 +743,8 @@
     "conditionKeys": [
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "updateimagestorageclass": {
     "name": "UpdateImageStorageClass",
@@ -761,7 +790,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "validatepullthroughcacherule": {
     "name": "ValidatePullThroughCacheRule",

package/data/actions/elasticfilesystem.json

@@ -129,7 +129,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createfilesystem": {
     "name": "CreateFileSystem",
@@ -156,7 +157,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createreplicationconfiguration": {
     "name": "CreateReplicationConfiguration",
@@ -171,7 +173,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createtags": {
     "name": "CreateTags",
@@ -189,7 +192,8 @@
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deleteaccesspoint": {
     "name": "DeleteAccessPoint",
@@ -204,7 +208,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletefilesystem": {
     "name": "DeleteFileSystem",
@@ -219,7 +224,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletefilesystempolicy": {
     "name": "DeleteFileSystemPolicy",
@@ -234,7 +240,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletemounttarget": {
     "name": "DeleteMountTarget",
@@ -249,7 +256,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletereplicationconfiguration": {
     "name": "DeleteReplicationConfiguration",
@@ -264,7 +272,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletetags": {
     "name": "DeleteTags",
@@ -281,7 +290,8 @@
     "conditionKeys": [
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describeaccesspoints": {
     "name": "DescribeAccessPoints",
@@ -302,7 +312,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describeaccountpreferences": {
     "name": "DescribeAccountPreferences",
@@ -325,7 +336,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describefilesystempolicy": {
     "name": "DescribeFileSystemPolicy",
@@ -340,7 +352,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describefilesystems": {
     "name": "DescribeFileSystems",
@@ -355,7 +368,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describelifecycleconfiguration": {
     "name": "DescribeLifecycleConfiguration",
@@ -370,7 +384,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describemounttargetsecuritygroups": {
     "name": "DescribeMountTargetSecurityGroups",
@@ -385,7 +400,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describemounttargets": {
     "name": "DescribeMountTargets",
@@ -406,7 +422,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describereplicationconfigurations": {
     "name": "DescribeReplicationConfigurations",
@@ -421,7 +438,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describetags": {
     "name": "DescribeTags",
@@ -436,7 +454,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listtagsforresource": {
     "name": "ListTagsForResource",
@@ -457,7 +476,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "modifymounttargetsecuritygroups": {
     "name": "ModifyMountTargetSecurityGroups",
@@ -472,7 +492,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putaccountpreferences": {
     "name": "PutAccountPreferences",
@@ -495,7 +516,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putfilesystempolicy": {
     "name": "PutFileSystemPolicy",
@@ -510,7 +532,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "putlifecycleconfiguration": {
     "name": "PutLifecycleConfiguration",
@@ -525,7 +548,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "tagresource": {
     "name": "TagResource",
@@ -550,7 +574,8 @@
       "aws:TagKeys",
       "elasticfilesystem:CreateAction"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "untagresource": {
     "name": "UntagResource",
@@ -573,7 +598,8 @@
     "conditionKeys": [
       "aws:TagKeys"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "updatefilesystem": {
     "name": "UpdateFileSystem",
@@ -588,7 +614,8 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "updatefilesystemprotection": {
     "name": "UpdateFileSystemProtection",
@@ -603,6 +630,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   }
 }

package/data/actions/elemental-inference.json

@@ -36,6 +36,21 @@
     ],
     "dependentActions": []
   },
+  "createscheduleaction": {
+    "name": "CreateScheduleAction",
+    "description": "Grants permission to create a schedule action for a feed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedictionary": {
     "name": "DeleteDictionary",
     "description": "Grants permission to delete a dictionary",
@@ -81,6 +96,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletescheduleaction": {
+    "name": "DeleteScheduleAction",
+    "description": "Grants permission to delete a schedule action for a feed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatefeed": {
     "name": "DisassociateFeed",
     "description": "Grants permission to disassociate a feed from an AWS resource",
@@ -187,6 +217,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listscheduleactions": {
+    "name": "ListScheduleActions",
+    "description": "Grants permission to list schedule actions for a feed",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags on a resource",

package/data/actions/inspector2.json

@@ -183,7 +183,9 @@
     "description": "Grants permission to request the generation of a findings report",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "inspector2:ExpectedBucketOwner"
+    ],
     "dependentActions": []
   },
   "createsbomexport": {
@@ -191,7 +193,9 @@
     "description": "Grants permission to request the generation of an SBOM report",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "inspector2:ExpectedBucketOwner"
+    ],
     "dependentActions": []
   },
   "deletecisscanconfiguration": {
@@ -415,6 +419,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getondemandscanstatus": {
+    "name": "GetOnDemandScanStatus",
+    "description": "Grants permission to retrieve the status of an on-demand scan for a specified resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsbomexport": {
     "name": "GetSbomExport",
     "description": "Grants permission to retrieve a requested SBOM report",
@@ -559,6 +571,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listondemandscans": {
+    "name": "ListOnDemandScans",
+    "description": "Grants permission to retrieve information about on-demand scans for a specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to retrieve the tags for an Amazon Inspector resource",
@@ -623,6 +643,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startondemandscan": {
+    "name": "StartOnDemandScan",
+    "description": "Grants permission to initiate an on-demand scan on a specified resource",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopcissession": {
     "name": "StopCisSession",
     "description": "Grants permission to stop a CIS scan session",