@cloud-copilot/iam-data 0.8.202411021 → 0.8.202411091

package/data/actions/ec2.json

@@ -24,6 +24,41 @@
     ],
     "dependentActions": []
   },
+  "acceptcapacityreservationbillingownership": {
+    "name": "AcceptCapacityReservationBillingOwnership",
+    "description": "Grants permission to accept assign billing of the available capacity of a shared Capacity Reservation to the calling account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "acceptreservedinstancesexchangequote": {
     "name": "AcceptReservedInstancesExchangeQuote",
     "description": "Grants permission to accept a Convertible Reserved Instance exchange quote",
@@ -435,6 +470,41 @@
     ],
     "dependentActions": []
   },
+  "associatecapacityreservationbillingowner": {
+    "name": "AssociateCapacityReservationBillingOwner",
+    "description": "Grants permission to assign billing of the unused capacity of a shared Capacity Reservation to a consumer account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "associateclientvpntargetnetwork": {
     "name": "AssociateClientVpnTargetNetwork",
     "description": "Grants permission to associate a target network with a Client VPN endpoint",
@@ -720,6 +790,41 @@
     ],
     "dependentActions": []
   },
+  "associatesecuritygroupvpc": {
+    "name": "AssociateSecurityGroupVpc",
+    "description": "Grants permission to associate a security group with another VPC in the same Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "security-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy",
+          "ec2:VpcID"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "associatesubnetcidrblock": {
     "name": "AssociateSubnetCidrBlock",
     "description": "Grants permission to associate a CIDR block with a subnet",
@@ -8098,6 +8203,16 @@
     ],
     "dependentActions": []
   },
+  "describecapacityreservationbillingrequests": {
+    "name": "DescribeCapacityReservationBillingRequests",
+    "description": "Grants permission to describe one or more requests to assign the billing of the unused capacity of a Capacity Reservation",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describecapacityreservationfleets": {
     "name": "DescribeCapacityReservationFleets",
     "description": "Grants permission to describe one or more Capacity Reservation Fleets",
@@ -8644,6 +8759,16 @@
     ],
     "dependentActions": []
   },
+  "describeinstanceimagemetadata": {
+    "name": "DescribeInstanceImageMetadata",
+    "description": "Grants permission to describe the AMI that was used to launch an instance",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describeinstancestatus": {
     "name": "DescribeInstanceStatus",
     "description": "Grants permission to describe the status of one or more instances",
@@ -9179,6 +9304,16 @@
     ],
     "dependentActions": []
   },
+  "describesecuritygroupvpcassociations": {
+    "name": "DescribeSecurityGroupVpcAssociations",
+    "description": "Grants permission to describe security group VPC associations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "describesecuritygroups": {
     "name": "DescribeSecurityGroups",
     "description": "Grants permission to describe one or more security groups",
@@ -10380,6 +10515,41 @@
     ],
     "dependentActions": []
   },
+  "disassociatecapacityreservationbillingowner": {
+    "name": "DisassociateCapacityReservationBillingOwner",
+    "description": "Grants permission to cancel a pending request to assign billing of the unused capacity of a Capacity Reservation to a consumer account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disassociateclientvpntargetnetwork": {
     "name": "DisassociateClientVpnTargetNetwork",
     "description": "Grants permission to disassociate a target network from a Client VPN endpoint",
@@ -10633,6 +10803,41 @@
     ],
     "dependentActions": []
   },
+  "disassociatesecuritygroupvpc": {
+    "name": "DisassociateSecurityGroupVpc",
+    "description": "Grants permission to disassociate a security group from a VPC",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "security-group",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SecurityGroupID",
+          "ec2:Vpc"
+        ],
+        "dependentActions": []
+      },
+      {
+        "name": "vpc",
+        "required": false,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Ipv4IpamPoolId",
+          "ec2:Ipv6IpamPoolId",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:Tenancy",
+          "ec2:VpcID"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "disassociatesubnetcidrblock": {
     "name": "DisassociateSubnetCidrBlock",
     "description": "Grants permission to disassociate a CIDR block from a subnet",
@@ -12995,6 +13200,44 @@
     ],
     "dependentActions": []
   },
+  "modifyinstancecpuoptions": {
+    "name": "ModifyInstanceCpuOptions",
+    "description": "Grants permission to modify the CPU options on an instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:Attribute",
+          "ec2:Attribute/${AttributeName}",
+          "ec2:AvailabilityZone",
+          "ec2:CpuOptionsAmdSevSnp",
+          "ec2:EbsOptimized",
+          "ec2:InstanceAutoRecovery",
+          "ec2:InstanceID",
+          "ec2:InstanceMarketType",
+          "ec2:InstanceMetadataTags",
+          "ec2:InstanceProfile",
+          "ec2:InstanceType",
+          "ec2:MetadataHttpEndpoint",
+          "ec2:MetadataHttpPutResponseHopLimit",
+          "ec2:MetadataHttpTokens",
+          "ec2:PlacementGroup",
+          "ec2:ProductCode",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:RootDeviceType",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "modifyinstancecreditspecification": {
     "name": "ModifyInstanceCreditSpecification",
     "description": "Grants permission to modify the credit option for CPU usage on an instance",
@@ -15019,6 +15262,41 @@
     ],
     "dependentActions": []
   },
+  "rejectcapacityreservationbillingownership": {
+    "name": "RejectCapacityReservationBillingOwnership",
+    "description": "Grants permission to reject a request to assign billing of the available capacity of a shared Capacity Reservation to your account",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "capacity-reservation",
+        "required": true,
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "ec2:AvailabilityZone",
+          "ec2:CapacityReservationFleet",
+          "ec2:CreateDate",
+          "ec2:DestinationCapacityReservationId",
+          "ec2:EbsOptimized",
+          "ec2:EndDate",
+          "ec2:EndDateType",
+          "ec2:InstanceCount",
+          "ec2:InstanceMatchCriteria",
+          "ec2:InstancePlatform",
+          "ec2:InstanceType",
+          "ec2:OutpostArn",
+          "ec2:PlacementGroup",
+          "ec2:ResourceTag/${TagKey}",
+          "ec2:SourceCapacityReservationId",
+          "ec2:Tenancy"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "ec2:Region"
+    ],
+    "dependentActions": []
+  },
   "rejecttransitgatewaymulticastdomainassociations": {
     "name": "RejectTransitGatewayMulticastDomainAssociations",
     "description": "Grants permission to reject requests to associate cross-account subnets with a transit gateway multicast domain",

package/data/actions/elasticfilesystem.json

@@ -490,6 +490,38 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "replicationread": {
+    "name": "ReplicationRead",
+    "isPermissionOnly": true,
+    "description": "Grants permission to read file system data for replication",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "replicationwrite": {
+    "name": "ReplicationWrite",
+    "isPermissionOnly": true,
+    "description": "Grants permission to replicate data to a file system",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "file-system",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "restore": {
     "name": "Restore",
     "isPermissionOnly": true,

package/data/actions/geo-maps.json

@@ -0,0 +1,32 @@
+{
+  "getstaticmap": {
+    "name": "GetStaticMap",
+    "description": "Grants permission to retrieve the static map",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettile": {
+    "name": "GetTile",
+    "description": "Grants permission to retrieve the map tile",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/geo-places.json

@@ -0,0 +1,107 @@
+{
+  "autocomplete": {
+    "name": "Autocomplete",
+    "description": "Grants permission to autocomplete text input with potential places and addresses as the user types",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "geocode": {
+    "name": "Geocode",
+    "description": "Grants permission to geocode a textual address or place into geographic coordinates",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getplace": {
+    "name": "GetPlace",
+    "description": "Grants permission to query a place by it's unqiue place ID",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "reversegeocode": {
+    "name": "ReverseGeocode",
+    "description": "Grants permission to convert geographic coordinates into a human-readable address or place",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchnearby": {
+    "name": "SearchNearby",
+    "description": "Grants permission to retrieve places near a position which match to a set of user defined restrictions such as category or food type offered by the place",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "searchtext": {
+    "name": "SearchText",
+    "description": "Grants permission to query for places using a single free-form text input",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "suggest": {
+    "name": "Suggest",
+    "description": "Grants permission to suggest potential places based on the user's input",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/geo-routes.json

@@ -0,0 +1,77 @@
+{
+  "calculateisolines": {
+    "name": "CalculateIsolines",
+    "description": "Grants permission to determine destinations or service areas reachable within a specified time",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "calculateroutematrix": {
+    "name": "CalculateRouteMatrix",
+    "description": "Grants permission to calculate routing matrice which providing travel time and distances between sets of origins and destinations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "calculateroutes": {
+    "name": "CalculateRoutes",
+    "description": "Grants permission to calculates routes between two or more locations",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "optimizewaypoints": {
+    "name": "OptimizeWaypoints",
+    "description": "Grants permission to calculate the most efficient sequence for visiting multiple waypoints or locations along a route",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "snaptoroads": {
+    "name": "SnapToRoads",
+    "description": "Grants permission to enhances the accuracy of geographic positioning by aligning GPS coordinates to the nearest road segments on a digital map",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}