@cloud-copilot/iam-data 0.3.202409051 → 0.3.202409061

package/data/actions/appconfig.json

@@ -229,6 +229,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaccountsettings": {
+    "name": "GetAccountSettings",
+    "description": "Grants permission to view account-wide AppConfig settings",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getapplication": {
     "name": "GetApplication",
     "description": "Grants permission to view details about an application",
@@ -802,6 +810,14 @@
     ],
     "dependentActions": []
   },
+  "updateaccountsettings": {
+    "name": "UpdateAccountSettings",
+    "description": "Grants permission to modify account-wide AppConfig settings",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateapplication": {
     "name": "UpdateApplication",
     "description": "Grants permission to modify an application",

package/data/actions/ec2.json

@@ -187,6 +187,15 @@
           "ec2:CreateTags"
         ]
       },
+      {
+        "name": "ipam-pool",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
       {
         "name": "ipv4pool-ec2",
         "required": false,
@@ -1294,8 +1303,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
-          "ec2:CapacityReservationFleet",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:CapacityReservationFleet"
         ],
         "dependentActions": []
       }
@@ -1579,6 +1587,43 @@
     ],
     "dependentActions": []
   },
+  "createcapacityreservationbysplitting": {
+    "name": "CreateCapacityReservationBySplitting",
+    "description": "Grants permission to create a new Capacity Reservation by splitting the available capacity of the source Capacity Reservation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": [
+          "ec2:CreateTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "createcapacityreservationfleet": {
     "name": "CreateCapacityReservationFleet",
     "description": "Grants permission to create a Capacity Reservation Fleet",
@@ -3488,8 +3533,7 @@
         "name": "capacity-reservation",
         "required": false,
         "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
-          "ec2:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
       },
@@ -4389,7 +4433,10 @@
       {
         "name": "traffic-mirror-filter-rule",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
         "dependentActions": []
       }
     ],
@@ -7204,7 +7251,9 @@
       {
         "name": "traffic-mirror-filter-rule",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
@@ -11308,8 +11357,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
-          "ec2:CapacityReservationFleet",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:CapacityReservationFleet"
         ],
         "dependentActions": []
       }
@@ -11472,8 +11520,7 @@
         "required": true,
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
-          "ec2:CapacityReservationFleet",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:CapacityReservationFleet"
         ],
         "dependentActions": []
       }
@@ -12582,8 +12629,7 @@
           "aws:ResourceTag/${TagKey}",
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}",
-          "ec2:CapacityReservationFleet",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:CapacityReservationFleet"
         ],
         "dependentActions": []
       }
@@ -12939,8 +12985,7 @@
         "name": "capacity-reservation",
         "required": false,
         "conditionKeys": [
-          "aws:ResourceTag/${TagKey}",
-          "ec2:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}"
         ],
         "dependentActions": []
       }
@@ -13731,6 +13776,7 @@
         "name": "traffic-mirror-filter-rule",
         "required": true,
         "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
           "ec2:Attribute",
           "ec2:Attribute/${AttributeName}"
         ],
@@ -14538,6 +14584,41 @@
     ],
     "dependentActions": []
   },
+  "movecapacityreservationinstances": {
+    "name": "MoveCapacityReservationInstances",
+    "description": "Grants permission to move available capacity from a source Capacity Reservation to a destination Capacity Reservation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "pausevolumeio": {
     "name": "PauseVolumeIO",
     "isPermissionOnly": true,
@@ -16036,8 +16117,7 @@
         "conditionKeys": [
           "aws:ResourceTag/${TagKey}",
           "ec2:IsLaunchTemplateResource",
-          "ec2:LaunchTemplate",
-          "ec2:ResourceTag/${TagKey}"
+          "ec2:LaunchTemplate"
         ],
         "dependentActions": []
       },

package/data/actions/elasticloadbalancing.json

@@ -336,6 +336,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describelistenerattributes": {
+    "name": "DescribeListenerAttributes",
+    "description": "Grants permission to describe the attributes for the specified listener",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describelistenercertificates": {
     "name": "DescribeListenerCertificates",
     "description": "Grants permission to describe the certificates for the specified secure listener",
@@ -520,6 +528,30 @@
     ],
     "dependentActions": []
   },
+  "modifylistenerattributes": {
+    "name": "ModifyListenerAttributes",
+    "description": "Grants permission to modify the attributes of the specified listener",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "listener/app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "listener/net",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "elasticloadbalancing:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "modifyloadbalancerattributes": {
     "name": "ModifyLoadBalancerAttributes",
     "description": "Grants permission to modify the attributes of the specified load balancer",

package/data/actions/events.json

@@ -949,10 +949,7 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   }
 }

package/data/actions/logs.json

@@ -348,6 +348,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeconfigurationtemplates": {
+    "name": "DescribeConfigurationTemplates",
+    "description": "Grants permission to retrieve a list of configuration templates of available log types",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describedeliveries": {
     "name": "DescribeDeliveries",
     "description": "Grants permission to retrieve a list of deliveries an account",
@@ -1173,6 +1181,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedeliveryconfiguration": {
+    "name": "UpdateDeliveryConfiguration",
+    "description": "Grants permission to update configuration related to a delivery",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "delivery",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "delivery-destination",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "delivery-source",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updateloganomalydetector": {
     "name": "UpdateLogAnomalyDetector",
     "description": "Grants permission to update a log anomaly detector",

package/data/actions/s3.json

@@ -1815,6 +1815,12 @@
     "description": "Grants permission to retrieve attributes related to a specific object",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "object",
         "required": true,
@@ -2407,6 +2413,29 @@
     ],
     "dependentActions": []
   },
+  "listcalleraccessgrants": {
+    "name": "ListCallerAccessGrants",
+    "description": "Grants permission to list caller's Access Grant",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "accessgrantsinstance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listjobs": {
     "name": "ListJobs",
     "description": "Grants permission to list current jobs and jobs that have ended recently",

package/data/conditionKeys/ec2.json

@@ -104,11 +104,21 @@
     "description": "Filters access by the name of a resource-creating API action",
     "type": "String"
   },
+  "ec2:createdate": {
+    "key": "ec2:CreateDate",
+    "description": "Filters access by the date and time at which the Capacity Reservation was created",
+    "type": "Date"
+  },
   "ec2:dpdtimeoutseconds": {
     "key": "ec2:DPDTimeoutSeconds",
     "description": "Filters access by the duration after which DPD timeout occurs on a VPN tunnel",
     "type": "Numeric"
   },
+  "ec2:destinationcapacityreservationid": {
+    "key": "ec2:DestinationCapacityReservationId",
+    "description": "Filters access by the ID of the Capacity Reservation that you want to move capacity into",
+    "type": "ARN"
+  },
   "ec2:dhcpoptionsid": {
     "key": "ec2:DhcpOptionsID",
     "description": "Filters access by the ID of a dynamic host configuration protocol (DHCP) options set",
@@ -139,6 +149,16 @@
     "description": "Filters access by whether the EBS volume is encrypted",
     "type": "Bool"
   },
+  "ec2:enddate": {
+    "key": "ec2:EndDate",
+    "description": "Filters access by the date and time at which the Capacity Reservation ends",
+    "type": "Date"
+  },
+  "ec2:enddatetype": {
+    "key": "ec2:EndDateType",
+    "description": "Filters access by the way in which the Capacity Reservation ends",
+    "type": "String"
+  },
   "ec2:fisactionid": {
     "key": "ec2:FisActionId",
     "description": "Filters access by the ID of an AWS FIS action",
@@ -189,6 +209,11 @@
     "description": "Filters access by whether the instance type supports auto recovery",
     "type": "String"
   },
+  "ec2:instancecount": {
+    "key": "ec2:InstanceCount",
+    "description": "Filters access by the number of instances",
+    "type": "Numeric"
+  },
   "ec2:instanceid": {
     "key": "ec2:InstanceID",
     "description": "Filters access by the ID of an instance",
@@ -199,11 +224,21 @@
     "description": "Filters access by the market or purchasing option of an instance (capacity-block, on-demand, or spot)",
     "type": "String"
   },
+  "ec2:instancematchcriteria": {
+    "key": "ec2:InstanceMatchCriteria",
+    "description": "Filters access by the type of instance launches that the Capacity Reservation accepts",
+    "type": "String"
+  },
   "ec2:instancemetadatatags": {
     "key": "ec2:InstanceMetadataTags",
     "description": "Filters access by whether the instance allows access to instance tags from the instance metadata",
     "type": "String"
   },
+  "ec2:instanceplatform": {
+    "key": "ec2:InstancePlatform",
+    "description": "Filters access by the type of operating system for which the Capacity Reservation reserves capacity",
+    "type": "ARN"
+  },
   "ec2:instanceprofile": {
     "key": "ec2:InstanceProfile",
     "description": "Filters access by the ARN of an instance profile",
@@ -484,6 +519,11 @@
     "description": "Filters access by the initiation time of a snapshot",
     "type": "String"
   },
+  "ec2:sourcecapacityreservationid": {
+    "key": "ec2:SourceCapacityReservationId",
+    "description": "Filters access by the ID of the Capacity Reservation from which you want to move capacity",
+    "type": "ARN"
+  },
   "ec2:sourceinstancearn": {
     "key": "ec2:SourceInstanceARN",
     "description": "Filters access by the ARN of the instance from which the request originated",

package/data/resourceTypes/ec2.json

@@ -37,11 +37,25 @@
       "aws:TagKeys",
       "ec2:Attribute",
       "ec2:Attribute/${AttributeName}",
+      "ec2:AvailabilityZone",
       "ec2:CapacityReservationFleet",
+      "ec2:CreateDate",
+      "ec2:DestinationCapacityReservationId",
+      "ec2:EbsOptimized",
+      "ec2:EndDate",
+      "ec2:EndDateType",
+      "ec2:InstanceCount",
+      "ec2:InstanceMatchCriteria",
+      "ec2:InstancePlatform",
+      "ec2:InstanceType",
       "ec2:IsLaunchTemplateResource",
       "ec2:LaunchTemplate",
+      "ec2:OutpostArn",
+      "ec2:PlacementGroup",
       "ec2:Region",
-      "ec2:ResourceTag/${TagKey}"
+      "ec2:ResourceTag/${TagKey}",
+      "ec2:SourceCapacityReservationId",
+      "ec2:Tenancy"
     ]
   },
   "carrier-gateway": {
@@ -827,6 +841,9 @@
     "key": "traffic-mirror-filter-rule",
     "arn": "arn:${Partition}:ec2:${Region}:${Account}:traffic-mirror-filter-rule/${TrafficMirrorFilterRuleId}",
     "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
       "ec2:Attribute",
       "ec2:Attribute/${AttributeName}",
       "ec2:Region"

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.3.202409051",
+  "version": "0.3.202409061",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-09-05T04:46:39.208Z",
+  "updatedAt": "2024-09-06T04:46:24.316Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",