@cloud-copilot/iam-data 0.22.202610271 → 0.22.202610291

package/data/actions/elemental-inference.json

@@ -36,6 +36,21 @@
     ],
     "dependentActions": []
   },
+  "createscheduleaction": {
+    "name": "CreateScheduleAction",
+    "description": "Grants permission to create a schedule action for a feed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedictionary": {
     "name": "DeleteDictionary",
     "description": "Grants permission to delete a dictionary",
@@ -81,6 +96,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletescheduleaction": {
+    "name": "DeleteScheduleAction",
+    "description": "Grants permission to delete a schedule action for a feed",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatefeed": {
     "name": "DisassociateFeed",
     "description": "Grants permission to disassociate a feed from an AWS resource",
@@ -187,6 +217,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listscheduleactions": {
+    "name": "ListScheduleActions",
+    "description": "Grants permission to list schedule actions for a feed",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "feed",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags on a resource",

package/data/actions/inspector2.json

@@ -183,7 +183,9 @@
     "description": "Grants permission to request the generation of a findings report",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "inspector2:ExpectedBucketOwner"
+    ],
     "dependentActions": []
   },
   "createsbomexport": {
@@ -191,7 +193,9 @@
     "description": "Grants permission to request the generation of an SBOM report",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "inspector2:ExpectedBucketOwner"
+    ],
     "dependentActions": []
   },
   "deletecisscanconfiguration": {
@@ -415,6 +419,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getondemandscanstatus": {
+    "name": "GetOnDemandScanStatus",
+    "description": "Grants permission to retrieve the status of an on-demand scan for a specified resource",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsbomexport": {
     "name": "GetSbomExport",
     "description": "Grants permission to retrieve a requested SBOM report",
@@ -559,6 +571,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listondemandscans": {
+    "name": "ListOnDemandScans",
+    "description": "Grants permission to retrieve information about on-demand scans for a specified resource",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to retrieve the tags for an Amazon Inspector resource",
@@ -623,6 +643,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startondemandscan": {
+    "name": "StartOnDemandScan",
+    "description": "Grants permission to initiate an on-demand scan on a specified resource",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopcissession": {
     "name": "StopCisSession",
     "description": "Grants permission to stop a CIS scan session",

package/data/actions/kafkaconnect.json

@@ -200,6 +200,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "pauseconnector": {
+    "name": "PauseConnector",
+    "description": "Grants permission to pause an MSK Connect connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "restartconnector": {
+    "name": "RestartConnector",
+    "description": "Grants permission to restart an MSK Connect connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "resumeconnector": {
+    "name": "ResumeConnector",
+    "description": "Grants permission to resume an MSK Connect connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to tag an MSK Connect resource",

package/data/actions/kms.json

@@ -30,7 +30,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "connectcustomkeystore": {
     "name": "ConnectCustomKeyStore",
@@ -64,7 +65,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createcustomkeystore": {
     "name": "CreateCustomKeyStore",
@@ -102,7 +104,8 @@
       "kms:RetiringServicePrincipal",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "createkey": {
     "name": "CreateKey",
@@ -222,7 +225,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletealias": {
     "name": "DeleteAlias",
@@ -246,7 +250,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "deletecustomkeystore": {
     "name": "DeleteCustomKeyStore",
@@ -274,7 +279,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "derivesharedsecret": {
     "name": "DeriveSharedSecret",
@@ -352,7 +358,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "describecustomkeystores": {
     "name": "DescribeCustomKeyStores",
@@ -381,7 +388,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "disablekey": {
     "name": "DisableKey",
@@ -400,7 +408,8 @@
       "kms:TrailingDaysWithoutKeyUsage",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "disablekeyrotation": {
     "name": "DisableKeyRotation",
@@ -418,7 +427,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "disconnectcustomkeystore": {
     "name": "DisconnectCustomKeyStore",
@@ -446,7 +456,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "enablekeyrotation": {
     "name": "EnableKeyRotation",
@@ -465,7 +476,8 @@
       "kms:RotationPeriodInDays",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "encapsulate": {
     "name": "Encapsulate",
@@ -507,7 +519,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "generatedatakey": {
     "name": "GenerateDataKey",
@@ -587,7 +600,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "generatedatakeypair": {
     "name": "GenerateDataKeyPair",
@@ -668,7 +682,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "generatedatakeypairwithoutplaintext": {
     "name": "GenerateDataKeyPairWithoutPlaintext",
@@ -691,7 +706,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "generatedatakeywithoutplaintext": {
     "name": "GenerateDataKeyWithoutPlaintext",
@@ -713,7 +729,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "generatemac": {
     "name": "GenerateMac",
@@ -733,7 +750,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "generaterandom": {
     "name": "GenerateRandom",
@@ -837,7 +855,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getkeyrotationstatus": {
     "name": "GetKeyRotationStatus",
@@ -855,7 +874,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getparametersforimport": {
     "name": "GetParametersForImport",
@@ -875,7 +895,8 @@
       "kms:WrappingAlgorithm",
       "kms:WrappingKeySpec"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "getpublickey": {
     "name": "GetPublicKey",
@@ -894,7 +915,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "importkeymaterial": {
     "name": "ImportKeyMaterial",
@@ -914,7 +936,8 @@
       "kms:ValidTo",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listaliases": {
     "name": "ListAliases",
@@ -944,7 +967,8 @@
       "kms:GrantIsForAWSResource",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listkeypolicies": {
     "name": "ListKeyPolicies",
@@ -962,7 +986,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listkeyrotations": {
     "name": "ListKeyRotations",
@@ -980,7 +1005,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listkeys": {
     "name": "ListKeys",
@@ -1009,7 +1035,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "listretirablegrants": {
     "name": "ListRetirableGrants",
@@ -1036,7 +1063,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "reencryptfrom": {
     "name": "ReEncryptFrom",
@@ -1059,7 +1087,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "reencryptto": {
     "name": "ReEncryptTo",
@@ -1082,7 +1111,8 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "replicatekey": {
     "name": "ReplicateKey",
@@ -1101,7 +1131,8 @@
       "kms:ReplicaRegion",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "retiregrant": {
     "name": "RetireGrant",
@@ -1122,7 +1153,8 @@
       "kms:GrantConstraintType",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "revokegrant": {
     "name": "RevokeGrant",
@@ -1141,7 +1173,8 @@
       "kms:GrantIsForAWSResource",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "rotatekeyondemand": {
     "name": "RotateKeyOnDemand",
@@ -1159,7 +1192,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "schedulekeydeletion": {
     "name": "ScheduleKeyDeletion",
@@ -1179,7 +1213,8 @@
       "kms:TrailingDaysWithoutKeyUsage",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "sign": {
     "name": "Sign",
@@ -1200,7 +1235,8 @@
       "kms:SigningAlgorithm",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "tagresource": {
     "name": "TagResource",
@@ -1220,7 +1256,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "untagresource": {
     "name": "UntagResource",
@@ -1239,7 +1276,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "updatealias": {
     "name": "UpdateAlias",
@@ -1263,7 +1301,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "updatecustomkeystore": {
     "name": "UpdateCustomKeyStore",
@@ -1291,7 +1330,8 @@
       "kms:CallerAccount",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "updateprimaryregion": {
     "name": "UpdatePrimaryRegion",
@@ -1310,7 +1350,8 @@
       "kms:PrimaryRegion",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "verify": {
     "name": "Verify",
@@ -1331,7 +1372,8 @@
       "kms:SigningAlgorithm",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   },
   "verifymac": {
     "name": "VerifyMac",
@@ -1351,6 +1393,7 @@
       "kms:RequestAlias",
       "kms:ViaService"
     ],
-    "dependentActions": []
+    "dependentActions": [],
+    "blockAnon": true
   }
 }

package/data/actions/odb.json

@@ -317,6 +317,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "exascale-db-storage-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "odb-network",
         "required": true,
@@ -358,7 +364,14 @@
     "name": "CreateExascaleDbStorageVault",
     "description": "Grants permission to create an Exascale DB storage vault",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -976,7 +989,14 @@
     "name": "ListExascaleDbStorageVaults",
     "description": "Grants permission to list information about the Exascale DB storage vaults owned by your Amazon Web Services account",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1464,6 +1484,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateexascalecloudexadatainfrastructure": {
+    "name": "UpdateExascaleCloudExadataInfrastructure",
+    "description": "Grants permission to configure Exascale storage on an Exadata infrastructure resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cloud-exadata-infrastructure",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateexascaledbstoragevault": {
     "name": "UpdateExascaleDbStorageVault",
     "description": "Grants permission to update properties of a specified Exascale DB storage vault",

package/data/actions/partnercentral.json

@@ -1713,6 +1713,16 @@
     ],
     "dependentActions": []
   },
+  "searchopportunities": {
+    "name": "SearchOpportunities",
+    "description": "Grants permission to search Opportunities on AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
   "searchpartnercentralcontent": {
     "name": "SearchPartnerCentralContent",
     "description": "Grants permission to search content in AWS Partner Central",