@cloud-copilot/iam-data 0.8.202411021 → 0.8.202411091

package/data/actions/mediapackagev2.json

@@ -1,4 +1,37 @@
 {
+  "cancelharvestjob": {
+    "name": "CancelHarvestJob",
+    "description": "Grants permission to cancel a harvest job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "HarvestJob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "OriginEndpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createchannel": {
     "name": "CreateChannel",
     "description": "Grants permission to create a channel in a channel group",
@@ -9,6 +42,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -35,11 +74,59 @@
     ],
     "dependentActions": []
   },
+  "createharvestjob": {
+    "name": "CreateHarvestJob",
+    "description": "Grants permission to create a harvest job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "HarvestJob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "OriginEndpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createoriginendpoint": {
     "name": "CreateOriginEndpoint",
     "description": "Grants permission to create an origin endpoint for a channel",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": true,
@@ -63,6 +150,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -93,6 +186,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelPolicy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -103,6 +208,18 @@
     "description": "Grants permission to delete an origin endpoint of a channel",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": true,
@@ -118,11 +235,29 @@
     "description": "Grants permission to delete a resource policy from an origin endpoint",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "OriginEndpointPolicy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -138,6 +273,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -168,6 +309,51 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelPolicy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getharvestjob": {
+    "name": "GetHarvestJob",
+    "description": "Grants permission to retrieve details of an harvest job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "HarvestJob",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "OriginEndpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -208,6 +394,18 @@
     "description": "Grants permission to retrieve details of an origin endpoint",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": true,
@@ -222,6 +420,39 @@
     "name": "GetOriginEndpointPolicy",
     "description": "Grants permission to retrieve details of a resource policy for an origin endpoint",
     "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "OriginEndpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "OriginEndpointPolicy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "harvestobject": {
+    "name": "HarvestObject",
+    "description": "Grants permission to make HarvestObject requests to MediaPackage",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "OriginEndpoint",
@@ -256,6 +487,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listharvestjobs": {
+    "name": "ListHarvestJobs",
+    "description": "Grants permission to list all harvest jobs in a channel group, channel, origin endpoint",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listoriginendpoints": {
     "name": "ListOriginEndpoints",
     "description": "Grants permission to list all origin endpoints of a channel",
@@ -266,6 +512,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -288,6 +540,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "HarvestJob",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": false,
@@ -308,6 +566,18 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelPolicy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -333,11 +603,29 @@
     "description": "Grants permission to attach a resource policy to an origin endpoint",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "OriginEndpointPolicy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -360,6 +648,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "HarvestJob",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": false,
@@ -390,6 +684,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "HarvestJob",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": false,
@@ -412,6 +712,12 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -437,6 +743,18 @@
     "description": "Grants permission to update an origin endpoint of a channel",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "Channel",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "ChannelGroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "OriginEndpoint",
         "required": true,

package/data/actions/opensearch.json

@@ -0,0 +1,18 @@
+{
+  "applicationaccessall": {
+    "name": "ApplicationAccessAll",
+    "isPermissionOnly": true,
+    "description": "Grants permission to access OpenSearch Application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/qapps.json

@@ -41,6 +41,51 @@
     ],
     "dependentActions": []
   },
+  "batchcreatecategory": {
+    "name": "BatchCreateCategory",
+    "description": "Grants permission to create the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdeletecategory": {
+    "name": "BatchDeleteCategory",
+    "description": "Grants permission to delete the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatecategory": {
+    "name": "BatchUpdateCategory",
+    "description": "Grants permission to update the categories of a library in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "copyqapp": {
     "name": "CopyQApp",
     "isPermissionOnly": true,
@@ -417,6 +462,21 @@
     ],
     "dependentActions": []
   },
+  "listcategories": {
+    "name": "ListCategories",
+    "description": "Grants permission to list categories in the Q Business application environment",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listlibraryitems": {
     "name": "ListLibraryItems",
     "description": "Grants permission to list library items in the Q Business application environment",

package/data/actions/s3express.json

@@ -17,9 +17,7 @@
       "s3express:ResourceAccount",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256",
-      "s3express:x-amz-server-side-encryption",
-      "s3express:x-amz-server-side-encryption-aws-kms-key-id"
+      "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
   },
@@ -42,7 +40,9 @@
       "s3express:signatureAge",
       "s3express:signatureversion",
       "s3express:TlsVersion",
-      "s3express:x-amz-content-sha256"
+      "s3express:x-amz-content-sha256",
+      "s3express:x-amz-server-side-encryption",
+      "s3express:x-amz-server-side-encryption-aws-kms-key-id"
     ],
     "dependentActions": []
   },

package/data/actions/sagemaker-mlflow.json

@@ -187,6 +187,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetracetag": {
+    "name": "DeleteTraceTag",
+    "description": "Grants permission to delete a trace tag in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletetraces": {
+    "name": "DeleteTraces",
+    "description": "Grants permission to delete traces in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "endtrace": {
+    "name": "EndTrace",
+    "description": "Grants permission to end a trace in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdownloaduriformodelversionartifacts": {
     "name": "GetDownloadURIForModelVersionArtifacts",
     "description": "Grants permission to get a URI to download model artifacts for a specific model version",
@@ -322,6 +367,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettraceinfo": {
+    "name": "GetTraceInfo",
+    "description": "Grants permission to get information about a trace in MLflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listartifacts": {
     "name": "ListArtifacts",
     "description": "Grants permission to list artifacts for a run",
@@ -517,6 +577,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchtraces": {
+    "name": "SearchTraces",
+    "description": "Grants permission to search for traces in MLflow",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "setexperimenttag": {
     "name": "SetExperimentTag",
     "description": "Grants permission to set a tag on an experiment",
@@ -592,6 +667,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "settracetag": {
+    "name": "SetTraceTag",
+    "description": "Grants permission to set a trace tag in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "starttrace": {
+    "name": "StartTrace",
+    "description": "Grants permission to start a trace in MLflow",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "mlflow-tracking-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "transitionmodelversionstage": {
     "name": "TransitionModelVersionStage",
     "description": "Grants permission to transition a model version to a particular stage",