@cloud-copilot/iam-data 0.8.202411141 → 0.8.202411161

package/data/actions/q.json

@@ -18,6 +18,25 @@
     ],
     "dependentActions": []
   },
+  "createplugin": {
+    "name": "CreatePlugin",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create and configure a third party plugin in Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteassignment": {
     "name": "DeleteAssignment",
     "isPermissionOnly": true,
@@ -37,6 +56,24 @@
     ],
     "dependentActions": []
   },
+  "deleteplugin": {
+    "name": "DeletePlugin",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete a configured plugin in Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "generatecodefromcommands": {
     "name": "GenerateCodeFromCommands",
     "isPermissionOnly": true,
@@ -64,6 +101,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getplugin": {
+    "name": "GetPlugin",
+    "isPermissionOnly": true,
+    "description": "Grants permission to view information about a specific configured Amazon Q plugin",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "gettroubleshootingresults": {
     "name": "GetTroubleshootingResults",
     "isPermissionOnly": true,
@@ -82,6 +137,49 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpluginproviders": {
+    "name": "ListPluginProviders",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list available plugins in Amazon Q",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listplugins": {
+    "name": "ListPlugins",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list configured plugins in Amazon Q",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list all tags associated with an Amazon Q resource",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "passrequest": {
     "name": "PassRequest",
     "isPermissionOnly": true,
@@ -127,6 +225,45 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "tagresource": {
+    "name": "TagResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate tags with an Amazon Q resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to remove tags associated with an Amazon Q resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "updatetroubleshootingcommandresult": {
     "name": "UpdateTroubleshootingCommandResult",
     "isPermissionOnly": true,
@@ -135,5 +272,21 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "useplugin": {
+    "name": "UsePlugin",
+    "isPermissionOnly": true,
+    "description": "Grants permission to use Amazon Q plugins",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "plugin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/sts.json

@@ -118,6 +118,23 @@
     ],
     "dependentActions": []
   },
+  "assumeroot": {
+    "name": "AssumeRoot",
+    "description": "Grants permission to obtain a set of temporary security credentials that you can use to perform privileged tasks in member accounts in your organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "root-user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "sts:TaskPolicyArn"
+    ],
+    "dependentActions": []
+  },
   "decodeauthorizationmessage": {
     "name": "DecodeAuthorizationMessage",
     "description": "Grants permission to decode additional information about the authorization status of a request from an encoded message returned in response to an AWS request",

package/data/actions/wisdom.json

@@ -78,6 +78,48 @@
     ],
     "dependentActions": []
   },
+  "createaiguardrail": {
+    "name": "CreateAIGuardrail",
+    "description": "Grants permission to create an ai guardrail",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "createaiguardrailversion": {
+    "name": "CreateAIGuardrailVersion",
+    "description": "Grants permission to create an ai guardrail version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AIGuardrail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "createaiprompt": {
     "name": "CreateAIPrompt",
     "description": "Grants permission to create an ai prompt",
@@ -361,6 +403,48 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteaiguardrail": {
+    "name": "DeleteAIGuardrail",
+    "description": "Grants permission to delete an ai guardrail",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AIGuardrail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteaiguardrailversion": {
+    "name": "DeleteAIGuardrailVersion",
+    "description": "Grants permission to delete an ai guardrail version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AIGuardrail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteaiprompt": {
     "name": "DeleteAIPrompt",
     "description": "Grants permission to delete an ai prompt",
@@ -601,6 +685,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getaiguardrail": {
+    "name": "GetAIGuardrail",
+    "description": "Grants permission to retrieve information about an ai guardrail",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AIGuardrail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getaiprompt": {
     "name": "GetAIPrompt",
     "description": "Grants permission to retrieve information about an ai prompt",
@@ -780,6 +885,27 @@
     ],
     "dependentActions": []
   },
+  "getnextmessage": {
+    "name": "GetNextMessage",
+    "description": "Grants permission to retrieve for next message in a session",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getquickresponse": {
     "name": "GetQuickResponse",
     "description": "Grants permission to retrieve content",
@@ -873,6 +999,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaiguardrailversions": {
+    "name": "ListAIGuardrailVersions",
+    "description": "Grants permission to list information about ai guardrail versions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "AIGuardrail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listaiguardrails": {
+    "name": "ListAIGuardrails",
+    "description": "Grants permission to list information about ai guardrails",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaipromptversions": {
     "name": "ListAIPromptVersions",
     "description": "Grants permission to list information about ai prompt versions",
@@ -1027,6 +1189,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmessages": {
+    "name": "ListMessages",
+    "description": "Grants permission to list messages in a session",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listquickresponses": {
     "name": "ListQuickResponses",
     "description": "Grants permission to list the quick response with a knowledge base",
@@ -1217,6 +1400,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "sendmessage": {
+    "name": "SendMessage",
+    "description": "Grants permission to send a message",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startcontentupload": {
     "name": "StartContentUpload",
     "description": "Grants permission to get a URL to upload content to a knowledge base",
@@ -1392,6 +1596,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateaiguardrail": {
+    "name": "UpdateAIGuardrail",
+    "description": "Grants permission to update information about an ai guardrail",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AIGuardrail",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "Assistant",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateaiprompt": {
     "name": "UpdateAIPrompt",
     "description": "Grants permission to update information about an ai prompt",

package/data/conditionKeys/cleanrooms-ml.json

@@ -16,7 +16,7 @@
   },
   "cleanrooms-ml:collaborationid": {
     "key": "cleanrooms-ml:CollaborationId",
-    "description": "Filters access by clean rooms collaboration id",
+    "description": "Filters access by Clean rooms collaboration id",
     "type": "String"
   }
 }

package/data/conditionKeys/deepracer.json

@@ -1,17 +1,17 @@
 {
   "aws:requesttag/${tagkey}": {
     "key": "aws:RequestTag/${TagKey}",
-    "description": "Filters actions by tag key-value pairs in the request",
+    "description": "Filters access by tag key-value pairs in the request",
     "type": "String"
   },
   "aws:resourcetag/${tagkey}": {
     "key": "aws:ResourceTag/${TagKey}",
-    "description": "Filters actions by tag key-value pairs attached to the resource",
+    "description": "Filters access by tag key-value pairs attached to the resource",
     "type": "String"
   },
   "aws:tagkeys": {
     "key": "aws:TagKeys",
-    "description": "Filters actions by tag keys in the request",
+    "description": "Filters access by tag keys in the request",
     "type": "ArrayOfString"
   },
   "deepracer:multiuser": {

package/data/conditionKeys/elasticache.json

@@ -61,7 +61,7 @@
   },
   "elasticache:kmskeyid": {
     "key": "elasticache:KmsKeyId",
-    "description": "Filters access by the KmsKeyId parameter in the request",
+    "description": "Filters access by the Key ID of the KMS key",
     "type": "String"
   },
   "elasticache:maximumdatastorage": {
@@ -74,6 +74,16 @@
     "description": "Filters access by the CacheUsageLimits.ECPUPerSecond.Maximum parameter in the CreateServerlessCache and ModifyServerlessCache request",
     "type": "Numeric"
   },
+  "elasticache:minimumdatastorage": {
+    "key": "elasticache:MinimumDataStorage",
+    "description": "Filters access by the CacheUsageLimits.DataStorage.Minimum parameter in the CreateServerlessCache and ModifyServerlessCache request",
+    "type": "Numeric"
+  },
+  "elasticache:minimumecpupersecond": {
+    "key": "elasticache:MinimumECPUPerSecond",
+    "description": "Filters access by the CacheUsageLimits.ECPUPerSecond.Minimum parameter in the CreateServerlessCache and ModifyServerlessCache request",
+    "type": "Numeric"
+  },
   "elasticache:multiazenabled": {
     "key": "elasticache:MultiAZEnabled",
     "description": "Filters access by the AZMode parameter, MultiAZEnabled parameter or the number of availability zones that the cluster or replication group can be placed in",

package/data/conditionKeys/license-manager-user-subscriptions.json

@@ -1 +1,17 @@
-{}
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tag key-value pairs attached to the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  }
+}

package/data/conditionKeys/partnercentral.json

@@ -0,0 +1,12 @@
+{
+  "partnercentral:catalog": {
+    "key": "partnercentral:Catalog",
+    "description": "Filters access by a specific Catalog. Accepted values: [AWS, Sandbox]",
+    "type": "String"
+  },
+  "partnercentral:relatedentitytype": {
+    "key": "partnercentral:RelatedEntityType",
+    "description": "Filters access by entity types for Opportunity association. Accepted values: [Solutions, AwsProducts, AwsMarketplaceOffers]",
+    "type": "String"
+  }
+}

package/data/conditionKeys/q.json

@@ -1,4 +1,19 @@
 {
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the Amazon Q resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
   "identitystore:groupid": {
     "key": "identitystore:GroupId",
     "description": "Filters access by IAM Identity Center Group ID",

package/data/conditionKeys/sts.json

@@ -254,6 +254,11 @@
     "description": "Filters access by the source identity that is passed in the request",
     "type": "String"
   },
+  "sts:taskpolicyarn": {
+    "key": "sts:TaskPolicyArn",
+    "description": "Filters access by TaskPolicyARN",
+    "type": "String"
+  },
   "sts:transitivetagkeys": {
     "key": "sts:TransitiveTagKeys",
     "description": "Filters access by the transitive tag keys that are passed in the request",

package/data/resourceTypes/cleanrooms-ml.json

@@ -26,5 +26,40 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "configuredmodelalgorithm": {
+    "key": "ConfiguredModelAlgorithm",
+    "arn": "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:configured-model-algorithm/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "configuredmodelalgorithmassociation": {
+    "key": "ConfiguredModelAlgorithmAssociation",
+    "arn": "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/configured-model-algorithm-association/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "mlinputchannel": {
+    "key": "MLInputChannel",
+    "arn": "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/ml-input-channel/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "trainedmodel": {
+    "key": "TrainedModel",
+    "arn": "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/trained-model/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "trainedmodelinferencejob": {
+    "key": "TrainedModelInferenceJob",
+    "arn": "arn:${Partition}:cleanrooms-ml:${Region}:${Account}:membership/${MembershipId}/trained-model-inference-job/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/elasticache.json

@@ -137,6 +137,8 @@
       "elasticache:KmsKeyId",
       "elasticache:MaximumDataStorage",
       "elasticache:MaximumECPUPerSecond",
+      "elasticache:MinimumDataStorage",
+      "elasticache:MinimumECPUPerSecond",
       "elasticache:SnapshotRetentionLimit"
     ]
   },