@cloud-copilot/iam-data 0.8.202411131 → 0.8.202411161

package/data/actions/deepracer.json

@@ -18,6 +18,18 @@
     ],
     "dependentActions": []
   },
+  "admindescribeaccountkey": {
+    "name": "AdminDescribeAccountKey",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve information of the KMS key that the user currently has assigned to their account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "deepracer:UserToken",
+      "deepracer:MultiUser"
+    ],
+    "dependentActions": []
+  },
   "admingetaccountconfig": {
     "name": "AdminGetAccountConfig",
     "isPermissionOnly": true,
@@ -63,6 +75,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "adminupdateaccountkey": {
+    "name": "AdminUpdateAccountKey",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update the KMS key that is assigned to the user's account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "deepracer:UserToken",
+      "deepracer:MultiUser"
+    ],
+    "dependentActions": []
+  },
   "clonereinforcementlearningmodel": {
     "name": "CloneReinforcementLearningModel",
     "isPermissionOnly": true,

package/data/actions/elasticache.json

@@ -523,8 +523,10 @@
           "elasticache:EngineVersion",
           "elasticache:SnapshotRetentionLimit",
           "elasticache:KmsKeyId",
+          "elasticache:MinimumDataStorage",
           "elasticache:MaximumDataStorage",
           "elasticache:DataStorageUnit",
+          "elasticache:MinimumECPUPerSecond",
           "elasticache:MaximumECPUPerSecond"
         ],
         "dependentActions": [
@@ -1632,8 +1634,10 @@
           "aws:ResourceTag/${TagKey}",
           "elasticache:EngineVersion",
           "elasticache:SnapshotRetentionLimit",
+          "elasticache:MinimumDataStorage",
           "elasticache:MaximumDataStorage",
           "elasticache:DataStorageUnit",
+          "elasticache:MinimumECPUPerSecond",
           "elasticache:MaximumECPUPerSecond"
         ],
         "dependentActions": [

package/data/actions/gamelift.json

@@ -50,9 +50,25 @@
       "s3:GetObject"
     ]
   },
+  "createcontainerfleet": {
+    "name": "CreateContainerFleet",
+    "description": "Grants permission to create a new container fleet of computing resources to run your game servers",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "ec2:DescribeAvailabilityZones",
+      "ec2:DescribeRegions",
+      "gamelift:TagResource",
+      "iam:PassRole"
+    ]
+  },
   "createcontainergroupdefinition": {
     "name": "CreateContainerGroupDefinition",
-    "description": "Grants permission to create a new container group definition for a container fleet",
+    "description": "Grants permission to create a new container group definition using images stored in an Amazon ECR repository",
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
@@ -62,6 +78,7 @@
     "dependentActions": [
       "ecr:BatchGetImage",
       "ecr:DescribeImages",
+      "ecr:GetAuthorizationToken",
       "ecr:GetDownloadUrlForLayer",
       "gamelift:TagResource"
     ]
@@ -87,18 +104,24 @@
     "description": "Grants permission to specify additional locations for a fleet",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:DescribeAvailabilityZones",
+          "ec2:DescribeRegions"
+        ]
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DescribeAvailabilityZones",
-      "ec2:DescribeRegions"
-    ]
+    "dependentActions": []
   },
   "creategameservergroup": {
     "name": "CreateGameServerGroup",
@@ -269,9 +292,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecontainerfleet": {
+    "name": "DeleteContainerFleet",
+    "description": "Grants permission to delete a container fleet",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecontainergroupdefinition": {
     "name": "DeleteContainerGroupDefinition",
-    "description": "Grants permission to delete a container group definition that is not being used in a fleet",
+    "description": "Grants permission to delete a container group definition",
     "accessLevel": "Write",
     "resourceTypes": [
       {
@@ -304,9 +342,15 @@
     "description": "Grants permission to delete locations for a fleet",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -401,9 +445,15 @@
     "description": "Grants permission to delete a set of auto-scaling rules",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -504,11 +554,32 @@
   },
   "describecompute": {
     "name": "DescribeCompute",
-    "description": "Grants permission to retrieve general properties of the compute such as ARN, fleet details, SDK endpoints, and location",
+    "description": "Grants permission to retrieve information for a compute in a fleet",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describecontainerfleet": {
+    "name": "DescribeContainerFleet",
+    "description": "Grants permission to retrieve the properties of an existing container fleet",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "containerFleet",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -519,7 +590,7 @@
   },
   "describecontainergroupdefinition": {
     "name": "DescribeContainerGroupDefinition",
-    "description": "Grants permission to retrieve general properties, including status, for a container group definition",
+    "description": "Grants permission to retrieve the properties of an existing container group definition",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -550,20 +621,41 @@
   },
   "describefleetcapacity": {
     "name": "DescribeFleetCapacity",
-    "description": "Grants permission to retrieve the current capacity setting for fleets",
+    "description": "Grants permission to retrieve the current capacity settings for managed fleets",
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefleetdeployment": {
+    "name": "DescribeFleetDeployment",
+    "description": "Grants permission to retrieve the properties of an existing fleet deployment",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefleetevents": {
     "name": "DescribeFleetEvents",
     "description": "Grants permission to retrieve entries from a fleet's event log",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -576,9 +668,15 @@
     "description": "Grants permission to retrieve general properties, including statuses, for a fleet's locations",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -591,9 +689,15 @@
     "description": "Grants permission to retrieve the current capacity setting for a fleet's location",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -718,12 +822,18 @@
   },
   "describeinstances": {
     "name": "DescribeInstances",
-    "description": "Grants permission to retrieve information about instances in a fleet",
+    "description": "Grants permission to retrieve information about instances in a managed fleet",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -783,9 +893,15 @@
     "description": "Grants permission to retrieve all scaling policies that are applied to a fleet",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -826,12 +942,18 @@
   },
   "getcomputeaccess": {
     "name": "GetComputeAccess",
-    "description": "Grants permission to retrieve access credentials of the compute",
+    "description": "Grants permission to retrieve credentials to remotely access a compute in a managed fleet",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -841,12 +963,18 @@
   },
   "getcomputeauthtoken": {
     "name": "GetComputeAuthToken",
-    "description": "Grants permission to retrieve an authorization token for a compute and fleet to use in game server processes",
+    "description": "Grants permission to retrieve an authentication token that allows processes on a compute to send requests to the Amazon GameLift service",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -898,8 +1026,37 @@
     "description": "Grants permission to retrieve all compute resources in the current Region",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcontainerfleets": {
+    "name": "ListContainerFleets",
+    "description": "Grants permission to retrieve the properties of all existing container fleets in the current Region",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcontainergroupdefinitionversions": {
+    "name": "ListContainerGroupDefinitionVersions",
+    "description": "Grants permission to retrieve the properties of all versions of an existing container group definition",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "containerGroupDefinition",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -910,7 +1067,15 @@
   },
   "listcontainergroupdefinitions": {
     "name": "ListContainerGroupDefinitions",
-    "description": "Grants permission to retrieve a list of names for all container group definitions in the current Region",
+    "description": "Grants permission to retrieve the properties of all existing container group definitions in the current Region",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listfleetdeployments": {
+    "name": "ListFleetDeployments",
+    "description": "Grants permission to retrieve the properties of all existing fleet deployments in the current Region",
     "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
@@ -980,6 +1145,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "containerGroupDefinition",
         "required": false,
@@ -1037,9 +1208,15 @@
     "description": "Grants permission to create or update a fleet auto-scaling policy",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1135,9 +1312,15 @@
     "description": "Grants permission to resume auto-scaling activity on a fleet after it was suspended with StopFleetActions()",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1181,9 +1364,15 @@
     "description": "Grants permission to suspend auto-scaling activity on a fleet",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -1239,6 +1428,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "containerGroupDefinition",
         "required": false,
@@ -1311,6 +1506,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "containerGroupDefinition",
         "required": false,
@@ -1395,6 +1596,41 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecontainerfleet": {
+    "name": "UpdateContainerFleet",
+    "description": "Grants permission to update an existing container fleet",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatecontainergroupdefinition": {
+    "name": "UpdateContainerGroupDefinition",
+    "description": "Grants permission to update the properties of an existing container group definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "containerGroupDefinition",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ecr:BatchGetImage",
+      "ecr:DescribeImages",
+      "ecr:GetAuthorizationToken",
+      "ecr:GetDownloadUrlForLayer"
+    ]
+  },
   "updatefleetattributes": {
     "name": "UpdateFleetAttributes",
     "description": "Grants permission to update the general properties of an existing fleet",
@@ -1412,12 +1648,18 @@
   },
   "updatefleetcapacity": {
     "name": "UpdateFleetCapacity",
-    "description": "Grants permission to adjust a fleet's capacity settings",
+    "description": "Grants permission to adjust a managed fleet's capacity settings",
     "accessLevel": "Write",
     "resourceTypes": [
+      {
+        "name": "containerFleet",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "fleet",
-        "required": true,
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }

package/data/actions/iam.json

@@ -763,6 +763,22 @@
     ],
     "dependentActions": []
   },
+  "disableorganizationsrootcredentialsmanagement": {
+    "name": "DisableOrganizationsRootCredentialsManagement",
+    "description": "Grants permission to disable the management of member account root user credentials for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disableorganizationsrootsessions": {
+    "name": "DisableOrganizationsRootSessions",
+    "description": "Grants permission to disable privileged root actions in member accounts for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enablemfadevice": {
     "name": "EnableMFADevice",
     "description": "Grants permission to enable an MFA device and associate it with the specified IAM user",
@@ -783,6 +799,22 @@
     ],
     "dependentActions": []
   },
+  "enableorganizationsrootcredentialsmanagement": {
+    "name": "EnableOrganizationsRootCredentialsManagement",
+    "description": "Grants permission to enable the management of member account root user credentials for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enableorganizationsrootsessions": {
+    "name": "EnableOrganizationsRootSessions",
+    "description": "Grants permission to enable privileged root actions in member accounts for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "generatecredentialreport": {
     "name": "GenerateCredentialReport",
     "description": "Grants permission to generate a credential report for the AWS account",
@@ -1438,6 +1470,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listorganizationsfeatures": {
+    "name": "ListOrganizationsFeatures",
+    "description": "Grants permission to list the centralized root access features enabled for your organization",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpolicies": {
     "name": "ListPolicies",
     "description": "Grants permission to list all managed policies",

package/data/actions/iot.json

@@ -4204,6 +4204,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatethingtype": {
+    "name": "UpdateThingType",
+    "description": "Grants permission to update information associated with the specified thing type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thingtype",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetopicruledestination": {
     "name": "UpdateTopicRuleDestination",
     "description": "Grants permission to update a TopicRuleDestination",