@cloud-copilot/iam-data 0.3.202409011 → 0.3.202409051

package/README.md

@@ -5,6 +5,9 @@ Contains IAM data for AWS actions, resources, and conditions based on IAM policy
 
 Published in ESM and CommonJS.
 
+## Data Updates
+Data is scanned daily and a new version is published if there are changes. The version number is updated to reflect the date of the last update and the function `iamDataUpdatedAt()` returns the date of the last data update. This process is managed outside this repo.
+
 ## Usage
 
 ```bash
@@ -52,3 +55,5 @@ for(const serviceKey of serviceKeys) {
 The version is numper is formatted as `major.minor.updatedAt`. The updatedAt is the date the data was last updated in the format `YYYYMMDDX` where `X` is a counter to enable deploying more than once per day if necessary. For example version `0.1.202408291` has data updated on August 29th, 2024.
 
 The version can be accessed using the `iamDataVersion()` method.
+
+There is also `iamDataUpdatedAt()` which returns the date the data was last updated.

package/data/actions/datazone.json

@@ -25,7 +25,6 @@
   },
   "addpolicygrant": {
     "name": "AddPolicyGrant",
-    "isPermissionOnly": true,
     "description": "Grants permission to add a policy grant",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -909,7 +908,6 @@
   },
   "listpolicygrants": {
     "name": "ListPolicyGrants",
-    "isPermissionOnly": true,
     "description": "Grants permission to list policy grants",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -1082,7 +1080,6 @@
   },
   "removepolicygrant": {
     "name": "RemovePolicyGrant",
-    "isPermissionOnly": true,
     "description": "Grants permission to remove a policy grant",
     "accessLevel": "Write",
     "resourceTypes": [],

package/data/actions/fis.json

@@ -134,6 +134,21 @@
     ],
     "dependentActions": []
   },
+  "getsafetylever": {
+    "name": "GetSafetyLever",
+    "description": "Grants permission to get information about the safety lever",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "safety-lever",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettargetaccountconfiguration": {
     "name": "GetTargetAccountConfiguration",
     "description": "Grants permission to retrieve an AWS FIS target account configuration for an AWS FIS experiment template",
@@ -448,6 +463,21 @@
     ],
     "dependentActions": []
   },
+  "updatesafetyleverstate": {
+    "name": "UpdateSafetyLeverState",
+    "description": "Grants permission to update the state of the safety lever",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "safety-lever",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetargetaccountconfiguration": {
     "name": "UpdateTargetAccountConfiguration",
     "description": "Grants permission to update an AWS FIS target account configuration",

package/data/actions/redshift-data.json

@@ -6,18 +6,20 @@
     "resourceTypes": [
       {
         "name": "cluster",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
         "name": "workgroup",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "redshift-data:session-owner-iam-userid"
+    ],
     "dependentActions": []
   },
   "cancelstatement": {
@@ -68,18 +70,20 @@
     "resourceTypes": [
       {
         "name": "cluster",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
       {
         "name": "workgroup",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "redshift-data:session-owner-iam-userid"
+    ],
     "dependentActions": []
   },
   "getstatementresult": {

package/data/conditionKeys/redshift-data.json

@@ -4,6 +4,11 @@
     "description": "Filters access by tag-value associated with the resource",
     "type": "String"
   },
+  "redshift-data:session-owner-iam-userid": {
+    "key": "redshift-data:session-owner-iam-userid",
+    "description": "Filters access by session owner iam userid",
+    "type": "String"
+  },
   "redshift-data:statement-owner-iam-userid": {
     "key": "redshift-data:statement-owner-iam-userid",
     "description": "Filters access by statement owner iam userid",

package/data/resourceTypes/fis.json

@@ -19,5 +19,9 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "safety-lever": {
+    "key": "safety-lever",
+    "arn": "arn:${Partition}:fis:${Region}:${Account}:safety-lever/${Id}"
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.3.202409011",
+  "version": "0.3.202409051",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-09-01T05:38:06.234Z",
+  "updatedAt": "2024-09-05T04:46:39.208Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",
@@ -17,7 +17,7 @@
   ],
   "types": "dist/cjs/index.d.ts",
   "scripts": {
-    "test": "npx vitest --run",
+    "test": "npx vitest --run --coverage",
     "build": "npx tsc -p tsconfig.cjs.json && npx tsc -p tsconfig.esm.json && ./postbuild.sh",
     "prepare": "npm run build"
   },
@@ -29,6 +29,7 @@
   "license": "GPL-3.0-or-later",
   "devDependencies": {
     "@types/node": "^22.5.0",
+    "@vitest/coverage-v8": "^2.0.5",
     "typescript": "^5.5.4",
     "vitest": "^2.0.5"
   }