@cloud-copilot/iam-data 0.8.202411141 → 0.8.202411161

package/data/actions/deepracer.json

@@ -18,6 +18,18 @@
     ],
     "dependentActions": []
   },
+  "admindescribeaccountkey": {
+    "name": "AdminDescribeAccountKey",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve information of the KMS key that the user currently has assigned to their account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "deepracer:UserToken",
+      "deepracer:MultiUser"
+    ],
+    "dependentActions": []
+  },
   "admingetaccountconfig": {
     "name": "AdminGetAccountConfig",
     "isPermissionOnly": true,
@@ -63,6 +75,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "adminupdateaccountkey": {
+    "name": "AdminUpdateAccountKey",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update the KMS key that is assigned to the user's account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "deepracer:UserToken",
+      "deepracer:MultiUser"
+    ],
+    "dependentActions": []
+  },
   "clonereinforcementlearningmodel": {
     "name": "CloneReinforcementLearningModel",
     "isPermissionOnly": true,

package/data/actions/elasticache.json

@@ -523,8 +523,10 @@
           "elasticache:EngineVersion",
           "elasticache:SnapshotRetentionLimit",
           "elasticache:KmsKeyId",
+          "elasticache:MinimumDataStorage",
           "elasticache:MaximumDataStorage",
           "elasticache:DataStorageUnit",
+          "elasticache:MinimumECPUPerSecond",
           "elasticache:MaximumECPUPerSecond"
         ],
         "dependentActions": [
@@ -1632,8 +1634,10 @@
           "aws:ResourceTag/${TagKey}",
           "elasticache:EngineVersion",
           "elasticache:SnapshotRetentionLimit",
+          "elasticache:MinimumDataStorage",
           "elasticache:MaximumDataStorage",
           "elasticache:DataStorageUnit",
+          "elasticache:MinimumECPUPerSecond",
           "elasticache:MaximumECPUPerSecond"
         ],
         "dependentActions": [

package/data/actions/iam.json

@@ -763,6 +763,22 @@
     ],
     "dependentActions": []
   },
+  "disableorganizationsrootcredentialsmanagement": {
+    "name": "DisableOrganizationsRootCredentialsManagement",
+    "description": "Grants permission to disable the management of member account root user credentials for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "disableorganizationsrootsessions": {
+    "name": "DisableOrganizationsRootSessions",
+    "description": "Grants permission to disable privileged root actions in member accounts for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "enablemfadevice": {
     "name": "EnableMFADevice",
     "description": "Grants permission to enable an MFA device and associate it with the specified IAM user",
@@ -783,6 +799,22 @@
     ],
     "dependentActions": []
   },
+  "enableorganizationsrootcredentialsmanagement": {
+    "name": "EnableOrganizationsRootCredentialsManagement",
+    "description": "Grants permission to enable the management of member account root user credentials for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "enableorganizationsrootsessions": {
+    "name": "EnableOrganizationsRootSessions",
+    "description": "Grants permission to enable privileged root actions in member accounts for an organization managed under the current account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "generatecredentialreport": {
     "name": "GenerateCredentialReport",
     "description": "Grants permission to generate a credential report for the AWS account",
@@ -1438,6 +1470,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listorganizationsfeatures": {
+    "name": "ListOrganizationsFeatures",
+    "description": "Grants permission to list the centralized root access features enabled for your organization",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpolicies": {
     "name": "ListPolicies",
     "description": "Grants permission to list all managed policies",

package/data/actions/iot.json

@@ -4204,6 +4204,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatethingtype": {
+    "name": "UpdateThingType",
+    "description": "Grants permission to update information associated with the specified thing type",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "thingtype",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetopicruledestination": {
     "name": "UpdateTopicRuleDestination",
     "description": "Grants permission to update a TopicRuleDestination",

package/data/actions/license-manager-user-subscriptions.json

@@ -3,7 +3,56 @@
     "name": "AssociateUser",
     "description": "Grants permission to associate a subscribed user to an instance launched with license manager user subscriptions products",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createlicenseserverendpoint": {
+    "name": "CreateLicenseServerEndpoint",
+    "description": "Grants permission to create a license server endpoint for a given server type for a given Identity Provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletelicenseserverendpoint": {
+    "name": "DeleteLicenseServerEndpoint",
+    "description": "Grants permission to delete a license server endpoint for a given server type for a given Identity Provider",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license-server-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -11,7 +60,14 @@
     "name": "DeregisterIdentityProvider",
     "description": "Grants permission to deregister Microsoft Active Directory with license-manager-user-subscriptions for a product",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -19,7 +75,20 @@
     "name": "DisassociateUser",
     "description": "Grants permission to disassociate a subscribed user from an instance launched with license manager user subscriptions products",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "instance-user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -39,11 +108,59 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listlicenseserverendpoints": {
+    "name": "ListLicenseServerEndpoints",
+    "description": "Grants permission to list license server endpoints",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listproductsubscriptions": {
     "name": "ListProductSubscriptions",
     "description": "Grants permission to lists all the product subscriptions for a product and identity provider",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a selected resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "instance-user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license-server-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "product-subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -51,7 +168,14 @@
     "name": "ListUserAssociations",
     "description": "Grants permission to list all the users associated to an instance launched for a product",
     "accessLevel": "List",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -60,22 +184,117 @@
     "description": "Grants permission to registers Microsoft Active Directory with license-manager-user-subscriptions for a product",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "startproductsubscription": {
     "name": "StartProductSubscription",
     "description": "Grants permission to start product subscription for a user on a registered active directory for a product",
     "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "stopproductsubscription": {
     "name": "StopProductSubscription",
     "description": "Grants permission to stop product subscription for a user on a registered active directory for a product",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "product-subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a selected resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "instance-user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license-server-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "product-subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a selected resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "instance-user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "license-server-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "product-subscription",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -83,7 +302,14 @@
     "name": "UpdateIdentityProviderSettings",
     "description": "Grants permission to update the identity provider configuration",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "identity-provider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   }

package/data/actions/partnercentral.json

@@ -0,0 +1,242 @@
+{
+  "acceptengagementinvitation": {
+    "name": "AcceptEngagementInvitation",
+    "description": "Grants permission to accept Engagement Invitations on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "engagement-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "assignopportunity": {
+    "name": "AssignOpportunity",
+    "description": "Grants permission to assign Opportunities on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "associateopportunity": {
+    "name": "AssociateOpportunity",
+    "description": "Grants permission to associate Opportunities on AWS Partner Central with other entities",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog",
+      "partnercentral:RelatedEntityType"
+    ],
+    "dependentActions": []
+  },
+  "createopportunity": {
+    "name": "CreateOpportunity",
+    "description": "Grants permission to create new Opportunities on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "disassociateopportunity": {
+    "name": "DisassociateOpportunity",
+    "description": "Grants permission to disassociate Opportunities on AWS Partner Central from other entities",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog",
+      "partnercentral:RelatedEntityType"
+    ],
+    "dependentActions": []
+  },
+  "getawsopportunitysummary": {
+    "name": "GetAwsOpportunitySummary",
+    "description": "Grants permission to retrieve AWS Opportunity Summaries for Opportunities on AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getengagementinvitation": {
+    "name": "GetEngagementInvitation",
+    "description": "Grants permission to retrieve details of Engagement Invitations on AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "engagement-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "getopportunity": {
+    "name": "GetOpportunity",
+    "description": "Grants permission to retrieve details of Opportunities on AWS Partner Central",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "listengagementinvitations": {
+    "name": "ListEngagementInvitations",
+    "description": "Grants permission to list Engagement Invitations on AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "listopportunities": {
+    "name": "ListOpportunities",
+    "description": "Grants permission to list Opportunities on AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "listsolutions": {
+    "name": "ListSolutions",
+    "description": "Grants permission to list Solutions on AWS Partner Central",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "rejectengagementinvitation": {
+    "name": "RejectEngagementInvitation",
+    "description": "Grants permission to reject Engagement Invitations on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "engagement-invitation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "startengagementbyacceptinginvitationtask": {
+    "name": "StartEngagementByAcceptingInvitationTask",
+    "description": "Grants permission to initiate tasks that start Engagements on AWS Partner Central by accepting an Engagement Invitation",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": [
+      "partnercentral:AcceptEngagementInvitation",
+      "partnercentral:CreateOpportunity",
+      "partnercentral:GetEngagementInvitation",
+      "partnercentral:SubmitOpportunity"
+    ]
+  },
+  "startengagementfromopportunitytask": {
+    "name": "StartEngagementFromOpportunityTask",
+    "description": "Grants permission to initiate tasks that start Engagements from Opportunities on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": [
+      "partnercentral:GetOpportunity",
+      "partnercentral:SubmitOpportunity"
+    ]
+  },
+  "submitopportunity": {
+    "name": "SubmitOpportunity",
+    "description": "Grants permission to submit Opportunities on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  },
+  "updateopportunity": {
+    "name": "UpdateOpportunity",
+    "description": "Grants permission to update Opportunities on AWS Partner Central",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Opportunity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "partnercentral:Catalog"
+    ],
+    "dependentActions": []
+  }
+}