@cloud-copilot/iam-data 0.7.202410171 → 0.7.202410231

package/data/actions/dataexchange.json

@@ -1,4 +1,19 @@
 {
+  "acceptdatagrant": {
+    "name": "AcceptDataGrant",
+    "description": "Grants permission to accept a data grant",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "canceljob": {
     "name": "CancelJob",
     "description": "Grants permission to cancel a job",
@@ -30,6 +45,19 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createdatagrant": {
+    "name": "CreateDataGrant",
+    "description": "Grants permission to create a data grant",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "dataexchange:PublishToDataGrant"
+    ]
+  },
   "createdataset": {
     "name": "CreateDataSet",
     "description": "Grants permission to create a data set",
@@ -90,6 +118,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletedatagrant": {
+    "name": "DeleteDataGrant",
+    "description": "Grants permission to delete a data grant",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataset": {
     "name": "DeleteDataSet",
     "description": "Grants permission to delete a data set",
@@ -162,6 +205,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdatagrant": {
+    "name": "GetDataGrant",
+    "description": "Grants permission to get a data grant",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataset": {
     "name": "GetDataSet",
     "description": "Grants permission to get information about a data set",
@@ -213,6 +271,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getreceiveddatagrant": {
+    "name": "GetReceivedDataGrant",
+    "description": "Grants permission to get a received data grant",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getrevision": {
     "name": "GetRevision",
     "description": "Grants permission to get information about a revision",
@@ -234,6 +307,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdatagrants": {
+    "name": "ListDataGrants",
+    "description": "Grants permission to list data grants for the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdatasetrevisions": {
     "name": "ListDataSetRevisions",
     "description": "Grants permission to list the revisions of a data set",
@@ -279,6 +360,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listreceiveddatagrants": {
+    "name": "ListReceivedDataGrants",
+    "description": "Grants permission to list received data grants for the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrevisionassets": {
     "name": "ListRevisionAssets",
     "description": "Grants permission to get list the assets of a revision",
@@ -305,6 +394,12 @@
     "description": "Grants permission to list the tags that you associated with the specified resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-sets",
         "required": false,
@@ -324,7 +419,23 @@
   "publishdataset": {
     "name": "PublishDataSet",
     "isPermissionOnly": true,
-    "description": "Grants permission to publish a data set",
+    "description": "Grants permission to publish a data set to a product",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "data-sets",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "publishtodatagrant": {
+    "name": "PublishToDataGrant",
+    "isPermissionOnly": true,
+    "description": "Grants permission to publish a data set to a data grant",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -416,6 +527,12 @@
     "description": "Grants permission to add one or more tags to a specified resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-sets",
         "required": false,
@@ -440,6 +557,12 @@
     "description": "Grants permission to remove one or more tags from a specified resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "data-grants",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "data-sets",
         "required": false,
@@ -517,7 +640,8 @@
     ],
     "conditionKeys": [],
     "dependentActions": [
-      "dataexchange:PublishDataSet"
+      "dataexchange:PublishDataSet",
+      "dataexchange:PublishToDataGrant"
     ]
   }
 }

package/data/actions/dms.json

@@ -69,6 +69,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ReplicationTaskAssessmentRun",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ReplicationTaskIndividualAssessment",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1415,6 +1427,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ReplicationTaskAssessmentRun",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ReplicationTaskIndividualAssessment",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1771,6 +1795,18 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ReplicationTaskAssessmentRun",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ReplicationTaskIndividualAssessment",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [

package/data/actions/q.json

@@ -37,6 +37,15 @@
     ],
     "dependentActions": []
   },
+  "generatecodefromcommands": {
+    "name": "GenerateCodeFromCommands",
+    "isPermissionOnly": true,
+    "description": "Grants permission to generate code from CLI commands in Amazon Q",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconversation": {
     "name": "GetConversation",
     "isPermissionOnly": true,

package/data/actions/qbusiness.json

@@ -7,6 +7,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for Amazon Q Business application resource",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "batchdeletedocument": {
     "name": "BatchDeleteDocument",
     "description": "Grants permission to batch delete document",

package/data/actions/redshift.json

@@ -80,6 +80,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "authorizeinboundintegration": {
+    "name": "AuthorizeInboundIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to Amazon Redshift to continuously validate that the target data warehouse can receive data replicated from the source ARN",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "authorizesnapshotaccess": {
     "name": "AuthorizeSnapshotAccess",
     "description": "Grants permission to the specified AWS account to restore a snapshot",
@@ -383,6 +399,38 @@
     ],
     "dependentActions": []
   },
+  "createinboundintegration": {
+    "name": "CreateInboundIntegration",
+    "isPermissionOnly": true,
+    "description": "Grants permission to the source principal to create an inbound integration for data to be replicated from the source into the target data warehouse",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createintegration": {
+    "name": "CreateIntegration",
+    "description": "Grants permission to create an Amazon Redshift zero-ETL integration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "kms:CreateGrant",
+          "kms:DescribeKey"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "redshift:IntegrationSourceArn",
+      "redshift:IntegrationTargetArn"
+    ],
+    "dependentActions": []
+  },
   "createqev2idcapplication": {
     "name": "CreateQev2IdcApplication",
     "isPermissionOnly": true,
@@ -492,6 +540,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -739,6 +793,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteintegration": {
+    "name": "DeleteIntegration",
+    "description": "Grants permission to delete an Amazon Redshift zero-ETL integration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletepartner": {
     "name": "DeletePartner",
     "description": "Grants permission to delete a partner integration from a cluster",
@@ -873,6 +944,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -1149,6 +1226,23 @@
     ],
     "dependentActions": []
   },
+  "describeintegrations": {
+    "name": "DescribeIntegrations",
+    "description": "Grants permission to describe an Amazon Redshift zero-ETL integration",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "describeloggingstatus": {
     "name": "DescribeLoggingStatus",
     "description": "Grants permission to describe whether information, such as queries and connection attempts, is being logged for a cluster",
@@ -1350,6 +1444,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "integration",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -1862,6 +1962,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "modifyintegration": {
+    "name": "ModifyIntegration",
+    "description": "Grants permission to modify an Amazon Redshift zero-ETL integration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "integration",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "modifyqev2idcapplication": {
     "name": "ModifyQev2IdcApplication",
     "isPermissionOnly": true,

package/data/actions/sagemaker.json

@@ -395,8 +395,7 @@
   },
   "batchgetmetrics": {
     "name": "BatchGetMetrics",
-    "isPermissionOnly": true,
-    "description": "Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components. This API is not publicly exposed at this point, however admins can control this action",
+    "description": "Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components",
     "accessLevel": "Read",
     "resourceTypes": [
       {

package/data/actions/workspaces-web.json

@@ -462,6 +462,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "expiresession": {
+    "name": "ExpireSession",
+    "description": "Grants permission to expire a session from a specific portal",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getbrowsersettings": {
     "name": "GetBrowserSettings",
     "description": "Grants permission to get details on browser settings",
@@ -552,6 +567,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsession": {
+    "name": "GetSession",
+    "description": "Grants permission to get information about a particular session for a portal",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettruststore": {
     "name": "GetTrustStore",
     "description": "Grants permission to get details on trust stores",
@@ -659,6 +689,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsessions": {
+    "name": "ListSessions",
+    "description": "Grants permission to list sessions for a Portal using optional filters",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "portal",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",

package/data/conditionKeys/dms.json

@@ -14,6 +14,11 @@
     "description": "Filters access by the presence of tag keys in the request",
     "type": "ArrayOfString"
   },
+  "dms:assessment-run-tag/${tagkey}": {
+    "key": "dms:assessment-run-tag/${TagKey}",
+    "description": "Filters access by the presence of tag key-value pairs in the request for AssessmentRun",
+    "type": "String"
+  },
   "dms:cert-tag/${tagkey}": {
     "key": "dms:cert-tag/${TagKey}",
     "description": "Filters access by the presence of tag key-value pairs in the request for Certificate",
@@ -39,6 +44,11 @@
     "description": "Filters access by the presence of tag key-value pairs in the request for EventSubscription",
     "type": "String"
   },
+  "dms:individual-assessment-tag/${tagkey}": {
+    "key": "dms:individual-assessment-tag/${TagKey}",
+    "description": "Filters access by the presence of tag key-value pairs in the request for IndividualAssessment",
+    "type": "String"
+  },
   "dms:instance-profile-tag/${tagkey}": {
     "key": "dms:instance-profile-tag/${TagKey}",
     "description": "Filters access by the presence of tag key-value pairs in the request for InstanceProfile",

package/data/conditionKeys/redshift.json

@@ -47,6 +47,16 @@
   "redshift:inboundintegrationarn": {
     "key": "redshift:InboundIntegrationArn",
     "description": "Filters access by the ARN of an inbound zero-ETL Integration resource",
-    "type": "String"
+    "type": "ARN"
+  },
+  "redshift:integrationsourcearn": {
+    "key": "redshift:IntegrationSourceArn",
+    "description": "Filters access by the ARN of a zero-ETL Integration source",
+    "type": "ARN"
+  },
+  "redshift:integrationtargetarn": {
+    "key": "redshift:IntegrationTargetArn",
+    "description": "Filters access by the ARN of a zero-ETL Integration target",
+    "type": "ARN"
   }
 }

package/data/resourceTypes/dataexchange.json

@@ -39,5 +39,12 @@
   "event-actions": {
     "key": "event-actions",
     "arn": "arn:${Partition}:dataexchange:${Region}:${Account}:event-actions/${EventActionId}"
+  },
+  "data-grants": {
+    "key": "data-grants",
+    "arn": "arn:${Partition}:dataexchange:${Region}:${Account}:data-grants/${DataGrantId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/dms.json

@@ -89,10 +89,18 @@
   },
   "replicationtaskassessmentrun": {
     "key": "ReplicationTaskAssessmentRun",
-    "arn": "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*"
+    "arn": "arn:${Partition}:dms:${Region}:${Account}:assessment-run:*",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "dms:assessment-run-tag/${TagKey}"
+    ]
   },
   "replicationtaskindividualassessment": {
     "key": "ReplicationTaskIndividualAssessment",
-    "arn": "arn:${Partition}:dms:${Region}:${Account}:individual-assessment:*"
+    "arn": "arn:${Partition}:dms:${Region}:${Account}:individual-assessment:*",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "dms:individual-assessment-tag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/redshift.json

@@ -46,6 +46,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "integration": {
+    "key": "integration",
+    "arn": "arn:${Partition}:redshift:${Region}:${Account}:integration:${IntegrationIdentifier}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "namespace": {
     "key": "namespace",
     "arn": "arn:${Partition}:redshift:${Region}:${Account}:namespace:${ClusterNamespace}",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.7.202410171",
+  "version": "0.7.202410231",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-10-17T04:49:04.610Z",
+  "updatedAt": "2024-10-23T04:47:37.666Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",