@cloud-copilot/iam-data 0.9.202411191 → 0.9.202411201

package/data/actions/omics.json

@@ -41,14 +41,7 @@
     "name": "CancelAnnotationImportJob",
     "description": "Grants permission to cancel an Annotation Import Job",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "AnnotationImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -71,14 +64,7 @@
     "name": "CancelVariantImportJob",
     "description": "Grants permission to cancel a Variant Import Job",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "VariantImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -102,7 +88,10 @@
     "description": "Grants permission to create an Annotation Store",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createannotationstoreversion": {
@@ -117,7 +106,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createmultipartreadsetupload": {
@@ -146,6 +138,17 @@
     ],
     "dependentActions": []
   },
+  "createruncache": {
+    "name": "CreateRunCache",
+    "description": "Grants permission to create a new workflow run cache",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createrungroup": {
     "name": "CreateRunGroup",
     "description": "Grants permission to create a new workflow run group",
@@ -181,7 +184,10 @@
     "description": "Grants permission to create a Variant Store",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createworkflow": {
@@ -282,6 +288,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteruncache": {
+    "name": "DeleteRunCache",
+    "description": "Grants permission to delete a workflow run cache",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runCache",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleterungroup": {
     "name": "DeleteRunGroup",
     "description": "Grants permission to delete a workflow run group",
@@ -297,6 +318,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletes3accesspolicy": {
+    "name": "DeleteS3AccessPolicy",
+    "description": "Grants permission to delete an access policy on a given store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletesequencestore": {
     "name": "DeleteSequenceStore",
     "description": "Grants permission to delete a Sequence Store",
@@ -354,14 +390,7 @@
     "name": "GetAnnotationImportJob",
     "description": "Grants permission to get the status of an Annotation Import Job",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "AnnotationImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -385,12 +414,6 @@
     "description": "Grants permission to get detailed information about a version in an Annotation Store",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "AnnotationStore",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "AnnotationStoreVersion",
         "required": true,
@@ -575,6 +598,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getruncache": {
+    "name": "GetRunCache",
+    "description": "Grants permission to retrieve workflow run cache details",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "runCache",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getrungroup": {
     "name": "GetRunGroup",
     "description": "Grants permission to retrieve workflow run group details",
@@ -611,6 +649,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gets3accesspolicy": {
+    "name": "GetS3AccessPolicy",
+    "description": "Grants permission to get details about an access policy on a given store",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsequencestore": {
     "name": "GetSequenceStore",
     "description": "Grants permission to get details about a Sequence Store",
@@ -638,14 +691,7 @@
     "name": "GetVariantImportJob",
     "description": "Grants permission to get the status of a Variant Import Job",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "VariantImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -838,6 +884,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listruncaches": {
+    "name": "ListRunCaches",
+    "description": "Grants permission to retrieve a list of workflow run caches",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrungroups": {
     "name": "ListRunGroups",
     "description": "Grants permission to retrieve a list of workflow run groups",
@@ -917,11 +971,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puts3accesspolicy": {
+    "name": "PutS3AccessPolicy",
+    "description": "Grants permission to put an access policy on a given store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startannotationimportjob": {
     "name": "StartAnnotationImportJob",
     "description": "Grants permission to import a list of Annotation files to an Annotation Store",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "AnnotationStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AnnotationStoreVersion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -998,6 +1080,12 @@
           "iam:PassRole"
         ]
       },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runGroup",
         "required": false,
@@ -1021,7 +1109,14 @@
     "name": "StartVariantImportJob",
     "description": "Grants permission to import a list of variant files to an Variant Store",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "VariantStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1030,6 +1125,24 @@
     "description": "Grants permission to add AWS tags to a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "AnnotationStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AnnotationStoreVersion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "VariantStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "readSet",
         "required": false,
@@ -1054,6 +1167,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runGroup",
         "required": false,
@@ -1084,6 +1203,24 @@
     "description": "Grants permission to remove resource AWS tags",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "AnnotationStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AnnotationStoreVersion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "VariantStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "readSet",
         "required": false,
@@ -1108,6 +1245,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runGroup",
         "required": false,
@@ -1153,13 +1296,22 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "AnnotationStore",
+        "name": "AnnotationStoreVersion",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateruncache": {
+    "name": "UpdateRunCache",
+    "description": "Grants permission to update a workflow run cache",
+    "accessLevel": "Write",
+    "resourceTypes": [
       {
-        "name": "AnnotationStoreVersion",
+        "name": "runCache",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1183,6 +1335,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatesequencestore": {
+    "name": "UpdateSequenceStore",
+    "description": "Grants permission to update details about a Sequence Store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevariantstore": {
     "name": "UpdateVariantStore",
     "description": "Grants permission to update metadata about the Variant Store",

package/data/actions/sqlworkbench.json

@@ -350,6 +350,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletesqlgenerationcontext": {
+    "name": "DeleteSqlGenerationContext",
+    "isPermissionOnly": true,
+    "description": "Grants permission to delete sql generation context",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletetab": {
     "name": "DeleteTab",
     "isPermissionOnly": true,
@@ -580,6 +589,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getsqlgenerationcontext": {
+    "name": "GetSqlGenerationContext",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get sql generation context",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getsqlrecommendations": {
+    "name": "GetSqlRecommendations",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get text to SQL recommendations",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getuserinfo": {
     "name": "GetUserInfo",
     "isPermissionOnly": true,
@@ -764,6 +791,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "passaccountsettings": {
+    "name": "PassAccountSettings",
+    "isPermissionOnly": true,
+    "description": "Grants permission to provide account settings with the request",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putqcustomcontext": {
     "name": "PutQCustomContext",
     "isPermissionOnly": true,
@@ -773,6 +809,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putsqlgenerationcontext": {
+    "name": "PutSqlGenerationContext",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update sql generation context",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "puttab": {
     "name": "PutTab",
     "isPermissionOnly": true,

package/data/conditionKeys/glue.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the service from which the credentials of the request is issued",
     "type": "String"
   },
+  "glue:enabledforredshiftautodiscovery": {
+    "key": "glue:EnabledForRedshiftAutoDiscovery",
+    "description": "Filters access by the presence of the key configured for role's identity-based policy",
+    "type": "Bool"
+  },
   "glue:roleassumedby": {
     "key": "glue:RoleAssumedBy",
     "description": "Filters access by the service from which the credentials of the request is obtained by assuming the customer role",

package/data/conditionKeys/omics.json

@@ -13,30 +13,5 @@
     "key": "aws:TagKeys",
     "description": "Filters access by the presence of tag keys in the request",
     "type": "ArrayOfString"
-  },
-  "omics:annotationimportjobjobid": {
-    "key": "omics:AnnotationImportJobJobId",
-    "description": "Filters access by a unique resource identifier",
-    "type": "String"
-  },
-  "omics:annotationstorename": {
-    "key": "omics:AnnotationStoreName",
-    "description": "Filters access by the name of the store",
-    "type": "String"
-  },
-  "omics:annotationstoreversionname": {
-    "key": "omics:AnnotationStoreVersionName",
-    "description": "Filters access by the name of the annotation store version",
-    "type": "String"
-  },
-  "omics:variantimportjobjobid": {
-    "key": "omics:VariantImportJobJobId",
-    "description": "Filters access by a unique resource identifier",
-    "type": "String"
-  },
-  "omics:variantstorename": {
-    "key": "omics:VariantStoreName",
-    "description": "Filters access by the name of the store",
-    "type": "String"
   }
 }

package/data/resourceTypes/glue.json

@@ -1,7 +1,11 @@
 {
+  "rootcatalog": {
+    "key": "rootcatalog",
+    "arn": "arn:${Partition}:glue:${Region}:${Account}:catalog"
+  },
   "catalog": {
     "key": "catalog",
-    "arn": "arn:${Partition}:glue:${Region}:${Account}:catalog"
+    "arn": "arn:${Partition}:glue:${Region}:${Account}:catalog/${CatalogName}"
   },
   "database": {
     "key": "database",
@@ -120,5 +124,12 @@
   "completion": {
     "key": "completion",
     "arn": "arn:${Partition}:glue:${Region}:${Account}:completion/${CompletionId}"
+  },
+  "integration": {
+    "key": "integration",
+    "arn": "arn:${Partition}:glue:${Region}:${Account}:integration:${IntegrationId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/omics.json

@@ -1,23 +1,16 @@
 {
-  "annotationimportjob": {
-    "key": "AnnotationImportJob",
-    "arn": "arn:${Partition}:omics:${Region}:${Account}:annotationImportJob/${AnnotationImportJobId}",
-    "conditionKeys": [
-      "omics:AnnotationImportJobJobId"
-    ]
-  },
   "annotationstore": {
     "key": "AnnotationStore",
-    "arn": "arn:${Partition}:omics:${Region}:${Account}:annotationStore/${AnnotationStoreId}",
+    "arn": "arn:${Partition}:omics:${Region}:${Account}:annotationStore/${AnnotationStoreName}",
     "conditionKeys": [
-      "omics:AnnotationStoreName"
+      "aws:ResourceTag/${TagKey}"
     ]
   },
   "annotationstoreversion": {
     "key": "AnnotationStoreVersion",
     "arn": "arn:${Partition}:omics:${Region}:${Account}:annotationStore/${AnnotationStoreName}/version/${AnnotationStoreVersionName}",
     "conditionKeys": [
-      "omics:AnnotationStoreVersionName"
+      "aws:ResourceTag/${TagKey}"
     ]
   },
   "readset": {
@@ -48,6 +41,13 @@
       "aws:ResourceTag/${TagKey}"
     ]
   },
+  "runcache": {
+    "key": "runCache",
+    "arn": "arn:${Partition}:omics:${Region}:${Account}:runCache/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
   "rungroup": {
     "key": "runGroup",
     "arn": "arn:${Partition}:omics:${Region}:${Account}:runGroup/${Id}",
@@ -70,18 +70,11 @@
     "key": "TaskResource",
     "arn": "arn:${Partition}:omics:${Region}:${Account}:task/${Id}"
   },
-  "variantimportjob": {
-    "key": "VariantImportJob",
-    "arn": "arn:${Partition}:omics:${Region}:${Account}:variantImportJob/${VariantImportJobId}",
-    "conditionKeys": [
-      "omics:VariantImportJobJobId"
-    ]
-  },
   "variantstore": {
     "key": "VariantStore",
-    "arn": "arn:${Partition}:omics:${Region}:${Account}:variantStore/${VariantStoreId}",
+    "arn": "arn:${Partition}:omics:${Region}:${Account}:variantStore/${VariantStoreName}",
     "conditionKeys": [
-      "omics:VariantStoreName"
+      "aws:ResourceTag/${TagKey}"
     ]
   },
   "workflow": {

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411191",
+  "version": "0.9.202411201",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-19T04:49:13.392Z",
+  "updatedAt": "2024-11-20T04:49:22.137Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",