@cloud-copilot/iam-data 0.4.202409171 → 0.4.202409191

package/README.md

@@ -52,7 +52,7 @@ for(const serviceKey of serviceKeys) {
 * `iamConditionKeyExists(serviceKey: string, conditionKey: string)` - Returns true if the condition key exists.
 
 ### Version Info
-The version is number is formatted as `major.minor.updatedAt`. The updatedAt is the date the data was last updated in the format `YYYYMMDDX` where `X` is a counter to enable deploying more than once per day if necessary. For example version `0.1.202408291` has data updated on August 29th, 2024.
+The version is number is formatted as `major.minor.updatedAt`. The updatedAt is the date the data was last updated in the format `YYYYMMDDX` where `X` is a counter to enable publishing more than once per day if necessary. For example version `0.1.202408291` has data updated on August 29th, 2024.
 
 The version can be accessed using the `iamDataVersion()` method.
 

package/data/actions/amplifybackend.json

@@ -542,7 +542,9 @@
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": []
+    "dependentActions": [
+      "s3:ListAllMyBuckets"
+    ]
   },
   "removeallbackends": {
     "name": "RemoveAllBackends",

package/data/actions/iot.json

@@ -56,6 +56,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatesbomwithpackageversion": {
+    "name": "AssociateSbomWithPackageVersion",
+    "description": "Grants permission to associate SBOM files to a package version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iot:GetIndexingConfiguration"
+    ]
+  },
   "associatetargetswithjob": {
     "name": "AssociateTargetsWithJob",
     "description": "Grants permission to associate a group with a continuous job",
@@ -615,7 +632,8 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
-          "iot:GetIndexingConfiguration"
+          "iot:GetIndexingConfiguration",
+          "s3:GetObjectVersion"
         ]
       },
       {
@@ -1979,6 +1997,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatesbomfrompackageversion": {
+    "name": "DisassociateSbomFromPackageVersion",
+    "description": "Grants permission to disassociate SBOM files from a package version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enabletopicrule": {
     "name": "EnableTopicRule",
     "description": "Grants permission to enable the specified rule",
@@ -2678,6 +2711,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsbomvalidationresults": {
+    "name": "ListSbomValidationResults",
+    "description": "Grants permission to list SBOM validation results of a package version",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "packageversion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listscheduledaudits": {
     "name": "ListScheduledAudits",
     "description": "Grants permission to list all of your scheduled audits",
@@ -3985,7 +4033,8 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
-          "iot:GetIndexingConfiguration"
+          "iot:GetIndexingConfiguration",
+          "s3:GetObjectVersion"
         ]
       },
       {

package/data/actions/lambda.json

@@ -269,6 +269,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete the resource-based policy for an AWS Lambda function, version, or alias",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "lambda:RemovePermission"
+    ]
+  },
   "disablereplication": {
     "name": "DisableReplication",
     "isPermissionOnly": true,
@@ -530,6 +547,38 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getpublicaccessblockconfig": {
+    "name": "GetPublicAccessBlockConfig",
+    "description": "Grants permission to view the PublicAccessBlockConfig of an AWS Lambda function",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to view the resource-based policy for an AWS Lambda function, version, or alias",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "lambda:GetPolicy"
+    ]
+  },
   "getruntimemanagementconfig": {
     "name": "GetRuntimeManagementConfig",
     "description": "Grants permission to view the runtime management configuration of an AWS Lambda function",
@@ -863,6 +912,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putpublicaccessblockconfig": {
+    "name": "PutPublicAccessBlockConfig",
+    "description": "Grants permission to update the PublicAccessBlockConfig of an AWS Lambda function",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to update the resource-based policy for an AWS Lambda function, version, or alias",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "function",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "lambda:AddPermission",
+      "lambda:RemovePermission"
+    ]
+  },
   "putruntimemanagementconfig": {
     "name": "PutRuntimeManagementConfig",
     "description": "Grants permission to update the runtime management configuration of an AWS Lambda function",

package/data/actions/s3express.json

@@ -17,7 +17,9 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "s3express:x-amz-server-side-encryption",
+      "s3express:x-amz-server-side-encryption-aws-kms-key-id"
     ],
     "dependentActions": []
   },
@@ -107,6 +109,27 @@
     ],
     "dependentActions": []
   },
+  "getencryptionconfiguration": {
+    "name": "GetEncryptionConfiguration",
+    "description": "Grants permission to return the default encryption configuration for a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listallmydirectorybuckets": {
     "name": "ListAllMyDirectoryBuckets",
     "description": "Grants permission to list all directory buckets owned by the authenticated sender of the request",
@@ -141,5 +164,26 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "putencryptionconfiguration": {
+    "name": "PutEncryptionConfiguration",
+    "description": "Grants permission to set the encryption configuration for a directory bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/s3express.json

@@ -38,5 +38,15 @@
     "key": "s3express:x-amz-content-sha256",
     "description": "Filters access by unsigned content in your bucket",
     "type": "String"
+  },
+  "s3express:x-amz-server-side-encryption": {
+    "key": "s3express:x-amz-server-side-encryption",
+    "description": "Filters access by server-side encryption",
+    "type": "String"
+  },
+  "s3express:x-amz-server-side-encryption-aws-kms-key-id": {
+    "key": "s3express:x-amz-server-side-encryption-aws-kms-key-id",
+    "description": "Filters access by AWS KMS customer managed key for server-side encryption",
+    "type": "ARN"
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.4.202409171",
+  "version": "0.4.202409191",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-09-17T04:46:20.793Z",
+  "updatedAt": "2024-09-19T04:47:28.830Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",