@cloud-copilot/iam-data 0.9.202411191 → 0.9.202411211

package/data/actions/omics.json

@@ -41,14 +41,7 @@
     "name": "CancelAnnotationImportJob",
     "description": "Grants permission to cancel an Annotation Import Job",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "AnnotationImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -71,14 +64,7 @@
     "name": "CancelVariantImportJob",
     "description": "Grants permission to cancel a Variant Import Job",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "VariantImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -102,7 +88,10 @@
     "description": "Grants permission to create an Annotation Store",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createannotationstoreversion": {
@@ -117,7 +106,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createmultipartreadsetupload": {
@@ -146,6 +138,17 @@
     ],
     "dependentActions": []
   },
+  "createruncache": {
+    "name": "CreateRunCache",
+    "description": "Grants permission to create a new workflow run cache",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createrungroup": {
     "name": "CreateRunGroup",
     "description": "Grants permission to create a new workflow run group",
@@ -181,7 +184,10 @@
     "description": "Grants permission to create a Variant Store",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createworkflow": {
@@ -282,6 +288,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteruncache": {
+    "name": "DeleteRunCache",
+    "description": "Grants permission to delete a workflow run cache",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runCache",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleterungroup": {
     "name": "DeleteRunGroup",
     "description": "Grants permission to delete a workflow run group",
@@ -297,6 +318,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletes3accesspolicy": {
+    "name": "DeleteS3AccessPolicy",
+    "description": "Grants permission to delete an access policy on a given store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletesequencestore": {
     "name": "DeleteSequenceStore",
     "description": "Grants permission to delete a Sequence Store",
@@ -354,14 +390,7 @@
     "name": "GetAnnotationImportJob",
     "description": "Grants permission to get the status of an Annotation Import Job",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "AnnotationImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -385,12 +414,6 @@
     "description": "Grants permission to get detailed information about a version in an Annotation Store",
     "accessLevel": "Read",
     "resourceTypes": [
-      {
-        "name": "AnnotationStore",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      },
       {
         "name": "AnnotationStoreVersion",
         "required": true,
@@ -575,6 +598,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getruncache": {
+    "name": "GetRunCache",
+    "description": "Grants permission to retrieve workflow run cache details",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "runCache",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getrungroup": {
     "name": "GetRunGroup",
     "description": "Grants permission to retrieve workflow run group details",
@@ -611,6 +649,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gets3accesspolicy": {
+    "name": "GetS3AccessPolicy",
+    "description": "Grants permission to get details about an access policy on a given store",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsequencestore": {
     "name": "GetSequenceStore",
     "description": "Grants permission to get details about a Sequence Store",
@@ -638,14 +691,7 @@
     "name": "GetVariantImportJob",
     "description": "Grants permission to get the status of a Variant Import Job",
     "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "VariantImportJob",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -838,6 +884,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listruncaches": {
+    "name": "ListRunCaches",
+    "description": "Grants permission to retrieve a list of workflow run caches",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrungroups": {
     "name": "ListRunGroups",
     "description": "Grants permission to retrieve a list of workflow run groups",
@@ -917,11 +971,39 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puts3accesspolicy": {
+    "name": "PutS3AccessPolicy",
+    "description": "Grants permission to put an access policy on a given store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startannotationimportjob": {
     "name": "StartAnnotationImportJob",
     "description": "Grants permission to import a list of Annotation files to an Annotation Store",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "AnnotationStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AnnotationStoreVersion",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -998,6 +1080,12 @@
           "iam:PassRole"
         ]
       },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runGroup",
         "required": false,
@@ -1021,7 +1109,14 @@
     "name": "StartVariantImportJob",
     "description": "Grants permission to import a list of variant files to an Variant Store",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "VariantStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1030,6 +1125,24 @@
     "description": "Grants permission to add AWS tags to a resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "AnnotationStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AnnotationStoreVersion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "VariantStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "readSet",
         "required": false,
@@ -1054,6 +1167,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runGroup",
         "required": false,
@@ -1084,6 +1203,24 @@
     "description": "Grants permission to remove resource AWS tags",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "AnnotationStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "AnnotationStoreVersion",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "VariantStore",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "readSet",
         "required": false,
@@ -1108,6 +1245,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "runCache",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runGroup",
         "required": false,
@@ -1153,13 +1296,22 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "AnnotationStore",
+        "name": "AnnotationStoreVersion",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateruncache": {
+    "name": "UpdateRunCache",
+    "description": "Grants permission to update a workflow run cache",
+    "accessLevel": "Write",
+    "resourceTypes": [
       {
-        "name": "AnnotationStoreVersion",
+        "name": "runCache",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -1183,6 +1335,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatesequencestore": {
+    "name": "UpdateSequenceStore",
+    "description": "Grants permission to update details about a Sequence Store",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sequenceStore",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevariantstore": {
     "name": "UpdateVariantStore",
     "description": "Grants permission to update metadata about the Variant Store",

package/data/actions/rds.json

@@ -143,6 +143,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -778,7 +784,9 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "rds:AddTagsToResource"
+        ]
       },
       {
         "name": "shardgrp",
@@ -787,7 +795,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdbsnapshot": {
@@ -2226,6 +2237,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -2963,6 +2980,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,

package/data/actions/sagemaker.json

@@ -295,6 +295,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "partner-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "pipeline",
         "required": false,
@@ -1527,6 +1533,41 @@
     ],
     "dependentActions": []
   },
+  "createpartnerapp": {
+    "name": "CreatePartnerApp",
+    "description": "Grants permission to create an Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createpartnerapppresignedurl": {
+    "name": "CreatePartnerAppPresignedUrl",
+    "description": "Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createpipeline": {
     "name": "CreatePipeline",
     "description": "Grants permission to create a pipeline",
@@ -2570,6 +2611,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletepartnerapp": {
+    "name": "DeletePartnerApp",
+    "description": "Grants permission to delete an Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletepipeline": {
     "name": "DeletePipeline",
     "description": "Grants permission to delete a pipeline",
@@ -2914,6 +2970,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "partner-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "pipeline",
         "required": false,
@@ -3819,6 +3881,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describepartnerapp": {
+    "name": "DescribePartnerApp",
+    "description": "Grants permission to describe an Amazon SageMaker Partner AI App",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describepipeline": {
     "name": "DescribePipeline",
     "description": "Grants permission to get information about a pipeline",
@@ -4850,6 +4927,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpartnerapps": {
+    "name": "ListPartnerApps",
+    "description": "Grants permission to list the Amazon SageMaker Partner AI Apps in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpipelineexecutionsteps": {
     "name": "ListPipelineExecutionSteps",
     "description": "Grants permission to list steps for a pipeline execution",
@@ -5250,6 +5335,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "partner-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "pipeline",
         "required": false,
@@ -6382,6 +6473,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatepartnerapp": {
+    "name": "UpdatePartnerApp",
+    "description": "Grants permission to update an Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepipeline": {
     "name": "UpdatePipeline",
     "description": "Grants permission to update a pipeline",