@cloud-copilot/iam-data 0.8.202411021 → 0.8.202411091

package/data/actions/application-signals.json

@@ -63,6 +63,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listobservedentities": {
+    "name": "ListObservedEntities",
+    "description": "Grants permission to list entities associated with other entities",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listservicedependencies": {
     "name": "ListServiceDependencies",
     "description": "Grants permission to list service dependencies",

package/data/actions/appsync.json

@@ -44,6 +44,20 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createapi": {
+    "name": "CreateApi",
+    "description": "Grants permission to create an API",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole"
+    ]
+  },
   "createapicache": {
     "name": "CreateApiCache",
     "description": "Grants permission to create an API cache in AppSync",
@@ -60,6 +74,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createchannelnamespace": {
+    "name": "CreateChannelNamespace",
+    "description": "Grants permission to create a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createdatasource": {
     "name": "CreateDataSource",
     "description": "Grants permission to create a data source",
@@ -114,6 +147,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteapi": {
+    "name": "DeleteApi",
+    "description": "Grants permission to delete a API. This will also clean up every AppSync resource below that API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteapicache": {
     "name": "DeleteApiCache",
     "description": "Grants permission to delete an API cache in AppSync",
@@ -130,6 +180,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletechannelnamespace": {
+    "name": "DeleteChannelNamespace",
+    "description": "Grants permission to delete a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deletedatasource": {
     "name": "DeleteDataSource",
     "description": "Grants permission to delete a data source",
@@ -264,6 +331,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "eventconnect": {
+    "name": "EventConnect",
+    "description": "Grants permission to connect to an Event API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "eventpublish": {
+    "name": "EventPublish",
+    "description": "Grants permission to publish events to a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "eventsubscribe": {
+    "name": "EventSubscribe",
+    "description": "Grants permission to subscribe to a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "flushapicache": {
     "name": "FlushApiCache",
     "description": "Grants permission to flush an API cache in AppSync",
@@ -272,6 +384,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getapi": {
+    "name": "GetApi",
+    "description": "Grants permission to retrieve an API",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getapiassociation": {
     "name": "GetApiAssociation",
     "description": "Grants permission to read custom domain name - GraphQL API association details in AppSync",
@@ -295,6 +424,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getchannelnamespace": {
+    "name": "GetChannelNamespace",
+    "description": "Grants permission to retrieve a channel namespace",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getdatasource": {
     "name": "GetDataSource",
     "description": "Grants permission to retrieve a data source",
@@ -444,6 +590,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listapis": {
+    "name": "ListApis",
+    "description": "Grants permission to list APIs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "listchannelnamespaces": {
+    "name": "ListChannelNamespaces",
+    "description": "Grants permission to list channel namespace",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listdatasources": {
     "name": "ListDataSources",
     "description": "Grants permission to list the data sources for a given API",
@@ -505,6 +678,18 @@
     "description": "Grants permission to list the tags for a resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": false,
@@ -616,12 +801,36 @@
     "description": "Grants permission to tag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": false,
@@ -641,12 +850,36 @@
     "description": "Grants permission to untag a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "api",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "channelNamespace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "graphqlapi",
         "required": false,
@@ -655,7 +888,27 @@
       }
     ],
     "conditionKeys": [
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateapi": {
+    "name": "UpdateApi",
+    "description": "Grants permission to update an API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "api",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
   },
@@ -675,6 +928,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatechannelnamespace": {
+    "name": "UpdateChannelNamespace",
+    "description": "Grants permission to update a channel namespace",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "channelNamespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update a data source",

package/data/actions/aps.json

@@ -716,6 +716,32 @@
     ],
     "dependentActions": []
   },
+  "updatescraper": {
+    "name": "UpdateScraper",
+    "description": "Grants permission to update a scraper",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scraper",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "aps:CreateScraper",
+          "aps:TagResource"
+        ]
+      },
+      {
+        "name": "workspace",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updateworkspacealias": {
     "name": "UpdateWorkspaceAlias",
     "description": "Grants permission to modify the alias of existing AMP workspace",

package/data/actions/bedrock.json

@@ -1770,6 +1770,28 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "renderprompt": {
+    "name": "RenderPrompt",
+    "isPermissionOnly": true,
+    "description": "Grants permission to render an existing prompt or its version",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "prompt",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "prompt-version",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "retrieve": {
     "name": "Retrieve",
     "description": "Grants permission to retrieve ingested data from a knowledge base",
@@ -2289,5 +2311,13 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "validateflowdefinition": {
+    "name": "ValidateFlowDefinition",
+    "description": "Grants permission to validate prompt flow definitions",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/cloudwatch.json

@@ -395,6 +395,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listentitiesformetric": {
+    "name": "ListEntitiesForMetric",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve all the entities that are emitting a given metric",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmanagedinsightrules": {
     "name": "ListManagedInsightRules",
     "description": "Grants permission to list available managed Insight Rules for a given Resource ARN",

package/data/actions/connect.json

@@ -35,6 +35,23 @@
       "ds:DescribeDirectories"
     ]
   },
+  "associateanalyticsdataset": {
+    "name": "AssociateAnalyticsDataSet",
+    "description": "Grants permission to grant access and to associate a dataset with the specified AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "associateapprovedorigin": {
     "name": "AssociateApprovedOrigin",
     "description": "Grants permission to associate approved origin for an existing Amazon Connect instance",
@@ -357,7 +374,6 @@
   },
   "batchassociateanalyticsdataset": {
     "name": "BatchAssociateAnalyticsDataSet",
-    "isPermissionOnly": true,
     "description": "Grants permission to grant access and to associate the datasets with the specified AWS account",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -375,7 +391,6 @@
   },
   "batchdisassociateanalyticsdataset": {
     "name": "BatchDisassociateAnalyticsDataSet",
-    "isPermissionOnly": true,
     "description": "Grants permission to revoke access and to disassociate the datasets with the specified AWS account",
     "accessLevel": "Write",
     "resourceTypes": [
@@ -2095,6 +2110,23 @@
     ],
     "dependentActions": []
   },
+  "disassociateanalyticsdataset": {
+    "name": "DisassociateAnalyticsDataSet",
+    "description": "Grants permission to revoke access and to disassociate a dataset with the specified AWS account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "disassociateapprovedorigin": {
     "name": "DisassociateApprovedOrigin",
     "description": "Grants permission to disassociate approved origin for an existing Amazon Connect instance",
@@ -2684,6 +2716,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listanalyticsdataassociations": {
+    "name": "ListAnalyticsDataAssociations",
+    "description": "Grants permission to list the association status of a dataset for a given Amazon Connect instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "listapprovedorigins": {
     "name": "ListApprovedOrigins",
     "description": "Grants permission to view approved origins of an existing Amazon Connect instance",
@@ -4227,6 +4276,42 @@
     ],
     "dependentActions": []
   },
+  "startoutboundchatcontact": {
+    "name": "StartOutboundChatContact",
+    "description": "Grants permission to initiate an outbound chat using the Amazon Connect API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "contact",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "phone-number",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId",
+      "connect:Subtype"
+    ],
+    "dependentActions": []
+  },
   "startoutboundvoicecontact": {
     "name": "StartOutboundVoiceContact",
     "description": "Grants permission to initiate outbound calls using the Amazon Connect API",
@@ -4242,6 +4327,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startscreensharing": {
+    "name": "StartScreenSharing",
+    "description": "Grants permission to start screen sharing for contact",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "starttaskcontact": {
     "name": "StartTaskContact",
     "description": "Grants permission to initiate a task using the Amazon Connect API",

package/data/actions/docdb-elastic.json

@@ -1,4 +1,21 @@
 {
+  "applypendingmaintenanceaction": {
+    "name": "ApplyPendingMaintenanceAction",
+    "description": "Grants permission to apply pending maintenance actions on Amazon DocDB-Elastic cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "copyclustersnapshot": {
     "name": "CopyClusterSnapshot",
     "description": "Grants permission to copy a new Amazon DocDB-Elastic cluster snapshot",
@@ -186,6 +203,23 @@
     ],
     "dependentActions": []
   },
+  "getpendingmaintenanceaction": {
+    "name": "GetPendingMaintenanceAction",
+    "description": "Grants permission to view details about pending maintenance actions on Amazon DocDB-Elastic cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listclustersnapshots": {
     "name": "ListClusterSnapshots",
     "description": "Grants permission to list the cluster snapshots in your account",
@@ -202,6 +236,16 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpendingmaintenanceactions": {
+    "name": "ListPendingMaintenanceActions",
+    "description": "Grants permission to list details about pending maintenance actions on any Amazon DocDB-Elastic cluster",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to lists tag for an DocumentDB Elastic resource",