@cloud-copilot/iam-data 0.8.202410261 → 0.8.202411011

package/data/actions/bedrock.json

@@ -241,6 +241,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createinferenceprofile": {
+    "name": "CreateInferenceProfile",
+    "description": "Grants permission to create inference profiles",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "foundation-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createknowledgebase": {
     "name": "CreateKnowledgeBase",
     "description": "Grants permission to create a knowledge base",
@@ -600,6 +630,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteinferenceprofile": {
+    "name": "DeleteInferenceProfile",
+    "description": "Grants permission to delete inference profiles",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteknowledgebase": {
     "name": "DeleteKnowledgeBase",
     "description": "Grants permission to delete a knowledge base",
@@ -955,6 +1000,12 @@
     "description": "Grants permission to get the properties associated with an inference profile",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "inference-profile",
         "required": true,
@@ -1182,6 +1233,12 @@
     "description": "Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "foundation-model",
         "required": true,
@@ -1217,6 +1274,12 @@
     "description": "Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body with streaming response",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "foundation-model",
         "required": true,
@@ -1534,6 +1597,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "application-inference-profile",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": true,
@@ -1816,6 +1885,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "application-inference-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": false,
@@ -1930,6 +2005,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "application-inference-profile",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custom-model",
         "required": false,

package/data/actions/ecs.json

@@ -264,6 +264,62 @@
     ],
     "dependentActions": []
   },
+  "describeservicedeployments": {
+    "name": "DescribeServiceDeployments",
+    "description": "Grants permission to describe one or more of your service deployments",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service-deployment",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:service",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeservicerevisions": {
+    "name": "DescribeServiceRevisions",
+    "description": "Grants permission to describe one or more of your service revisions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "service-revision",
+        "required": true,
+        "conditionKeys": [
+          "ecs:cluster",
+          "ecs:service",
+          "aws:ResourceTag/${TagKey}"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeservices": {
     "name": "DescribeServices",
     "description": "Grants permission to describe the specified services running in your cluster",
@@ -429,6 +485,24 @@
     ],
     "dependentActions": []
   },
+  "listservicedeployments": {
+    "name": "ListServiceDeployments",
+    "description": "Grants permission to get a list of service deployments for a specified service",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "service",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster"
+    ],
+    "dependentActions": []
+  },
   "listservices": {
     "name": "ListServices",
     "description": "Grants permission to get a list of services that are running in a specified cluster",

package/data/actions/es.json

@@ -35,6 +35,12 @@
     "description": "Grants permission to attach resource tags to an OpenSearch Service domain",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "domain",
         "required": true,
@@ -116,6 +122,17 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createapplication": {
+    "name": "CreateApplication",
+    "description": "Grants permission to create an OpenSearch Application",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdomain": {
     "name": "CreateDomain",
     "description": "Grants permission to create an Amazon OpenSearch Service domain",
@@ -214,6 +231,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteapplication": {
+    "name": "DeleteApplication",
+    "description": "Grants permission to delete an OpenSearch Application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedatasource": {
     "name": "DeleteDataSource",
     "description": "Grants permission to delete the data source for the OpenSearch Service domain",
@@ -696,6 +728,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getapplication": {
+    "name": "GetApplication",
+    "description": "Grants permission to get information about an OpenSearch Application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcompatibleelasticsearchversions": {
     "name": "GetCompatibleElasticsearchVersions",
     "description": "Grants permission to fetch a list of compatible OpenSearch and Elasticsearch versions to which an OpenSearch Service domain can be upgraded. This permission is deprecated. Use GetCompatibleVersions instead",
@@ -794,6 +841,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listapplications": {
+    "name": "ListApplications",
+    "description": "Grants permission to list OpenSearch Applications",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdatasources": {
     "name": "ListDataSources",
     "description": "Grants permission to retrieve a list of data source for the OpenSearch Service domain",
@@ -907,6 +969,12 @@
     "description": "Grants permission to display all resource tags for an OpenSearch Service domain",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "domain",
         "required": true,
@@ -986,6 +1054,12 @@
     "description": "Grants permission to remove resource tags from an OpenSearch Service domain",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "domain",
         "required": true,
@@ -1051,6 +1125,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateapplication": {
+    "name": "UpdateApplication",
+    "description": "Grants permission to update an OpenSearch Application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update the data source for the OpenSearch Service domain",

package/data/actions/logs.json

@@ -686,6 +686,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listentitiesforloggroup": {
+    "name": "ListEntitiesForLogGroup",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve all the entities that are associated with log group",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listloganomalydetectors": {
     "name": "ListLogAnomalyDetectors",
     "description": "Grants permission to return all the anomaly detectors that are associated with the AWS account making the request",
@@ -710,6 +719,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listloggroupsforentity": {
+    "name": "ListLogGroupsForEntity",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve all the log groups that are associated with entity",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for the specified resource",

package/data/actions/payment-cryptography.json

@@ -113,6 +113,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "generatemacemvpinchange": {
+    "name": "GenerateMacEmvPinChange",
+    "description": "Grants permission to generate a MAC (Message Authentication Code) cryptogram",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "alias",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "key",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "generatepindata": {
     "name": "GeneratePinData",
     "description": "Grants permission to generate pin-related data such as PIN, PIN Verification Value (PVV), PIN Block and PIN Offset during new card issuance or card re-issuance",

package/data/actions/s3.json

@@ -1062,7 +1062,7 @@
   },
   "getaccesspointpolicy": {
     "name": "GetAccessPointPolicy",
-    "description": "Grants permission to returns the access point policy associated with the specified access point",
+    "description": "Grants permission to return the access point policy associated with the specified access point",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1087,7 +1087,7 @@
   },
   "getaccesspointpolicyforobjectlambda": {
     "name": "GetAccessPointPolicyForObjectLambda",
-    "description": "Grants permission to returns the access point policy associated with the specified object lambda enabled access point",
+    "description": "Grants permission to return the access point policy associated with the specified object lambda enabled access point",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1686,7 +1686,7 @@
   },
   "getmultiregionaccesspointpolicy": {
     "name": "GetMultiRegionAccessPointPolicy",
-    "description": "Grants permission to returns the access point policy associated with the specified Multi-Region Access Point",
+    "description": "Grants permission to return the access point policy associated with the specified Multi-Region Access Point",
     "accessLevel": "Read",
     "resourceTypes": [
       {

package/data/actions/workmail.json

@@ -120,6 +120,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createidentitycenterapplication": {
+    "name": "CreateIdentityCenterApplication",
+    "description": "Grants permission to create an Identity Center application for WorkMail",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createimpersonationrole": {
     "name": "CreateImpersonationRole",
     "description": "Grants permission to create an impersonation role for the given Amazon WorkMail organization",
@@ -327,6 +335,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteidentitycenterapplication": {
+    "name": "DeleteIdentityCenterApplication",
+    "description": "Grants permission to delete an Identity Center application for WorkMail",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteidentityproviderconfiguration": {
+    "name": "DeleteIdentityProviderConfiguration",
+    "description": "Grants permission to delete the identity provider configuration for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteimpersonationrole": {
     "name": "DeleteImpersonationRole",
     "description": "Grants permission to delete an impersonation role for the given Amazon WorkMail organization",
@@ -466,6 +497,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletepersonalaccesstoken": {
+    "name": "DeletePersonalAccessToken",
+    "description": "Grants permission to delete a personal access token",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresource": {
     "name": "DeleteResource",
     "description": "Grants permission to delete the specified resource",
@@ -618,6 +664,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeidentityproviderconfiguration": {
+    "name": "DescribeIdentityProviderConfiguration",
+    "description": "Grants permission to read the identity provider configuration for the organization",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeinbounddmarcsettings": {
     "name": "DescribeInboundDmarcSettings",
     "description": "Grants permission to read the settings in a DMARC policy for a specified organization",
@@ -1003,6 +1064,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getpersonalaccesstokenmetadata": {
+    "name": "GetPersonalAccessTokenMetadata",
+    "description": "Grants permission to read metadata for a personal access token",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaccesscontrolrules": {
     "name": "ListAccessControlRules",
     "description": "Grants permission to list the access control rules",
@@ -1223,6 +1299,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpersonalaccesstokens": {
+    "name": "ListPersonalAccessTokens",
+    "description": "Grants permission to list metadata for personal access tokens",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listresourcedelegates": {
     "name": "ListResourceDelegates",
     "description": "Grants permission to list the delegates associated with a resource",
@@ -1332,6 +1423,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putidentityproviderconfiguration": {
+    "name": "PutIdentityProviderConfiguration",
+    "description": "Grants permission to add or update the identity provider configuration for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "organization",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putinbounddmarcsettings": {
     "name": "PutInboundDmarcSettings",
     "description": "Grants permission to enable or disable a DMARC policy for a given organization",

package/data/resourceTypes/bedrock.json

@@ -7,6 +7,13 @@
     "key": "inference-profile",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/${ResourceId}"
   },
+  "application-inference-profile": {
+    "key": "application-inference-profile",
+    "arn": "arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "custom-model": {
     "key": "custom-model",
     "arn": "arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId}",

package/data/resourceTypes/ecs.json

@@ -23,6 +23,24 @@
       "ecs:ResourceTag/${TagKey}"
     ]
   },
+  "service-deployment": {
+    "key": "service-deployment",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-deployment/${ClusterName}/${ServiceName}/${ServiceDeploymentId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:service"
+    ]
+  },
+  "service-revision": {
+    "key": "service-revision",
+    "arn": "arn:${Partition}:ecs:${Region}:${Account}:service-revision/${ClusterName}/${ServiceName}/${ServiceRevisionId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "ecs:cluster",
+      "ecs:service"
+    ]
+  },
   "task": {
     "key": "task",
     "arn": "arn:${Partition}:ecs:${Region}:${Account}:task/${ClusterName}/${TaskId}",

package/data/resourceTypes/es.json

@@ -6,6 +6,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "application": {
+    "key": "application",
+    "arn": "arn:${Partition}:opensearch:${Region}:${Account}:application/${AppId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "es_role": {
     "key": "es_role",
     "arn": "arn:${Partition}:iam::${Account}:role/aws-service-role/es.amazonaws.com/AWSServiceRoleForAmazonOpenSearchService",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.8.202410261",
+  "version": "0.8.202411011",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-10-26T04:47:20.594Z",
+  "updatedAt": "2024-11-01T04:48:21.093Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",