@cloud-copilot/iam-data 0.9.202411201 → 0.9.202411221

package/data/actions/autoscaling.json

@@ -168,6 +168,8 @@
       }
     ],
     "conditionKeys": [
+      "autoscaling:CapacityReservationIds",
+      "autoscaling:CapacityReservationResourceGroupArns",
       "autoscaling:InstanceTypes",
       "autoscaling:LaunchConfigurationName",
       "autoscaling:LaunchTemplateVersionSpecified",
@@ -986,6 +988,8 @@
       }
     ],
     "conditionKeys": [
+      "autoscaling:CapacityReservationIds",
+      "autoscaling:CapacityReservationResourceGroupArns",
       "autoscaling:InstanceTypes",
       "autoscaling:LaunchConfigurationName",
       "autoscaling:LaunchTemplateVersionSpecified",

package/data/actions/aws-marketplace.json

@@ -507,6 +507,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listagreementcharges": {
+    "name": "ListAgreementCharges",
+    "description": "Grants permission to users to view charges associated with their agreements",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listagreementrequests": {
     "name": "ListAgreementRequests",
     "description": "Grants permission to users to list their subscription requests for products that require subscription verification",
@@ -563,6 +571,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatepurchaseorders": {
+    "name": "UpdatePurchaseOrders",
+    "description": "Grants permission to users to update purchase orders for charges associated with their agreements",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "viewsubscriptions": {
     "name": "ViewSubscriptions",
     "description": "Grants permission to users to see their account's subscriptions",

package/data/actions/bedrock.json

@@ -1228,6 +1228,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeinlineagent": {
+    "name": "InvokeInlineAgent",
+    "description": "Grants permission to send user input (text-only) to the inline agent for Bedrock",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokemodel": {
     "name": "InvokeModel",
     "description": "Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body",

package/data/actions/cloudfront.json

@@ -1,4 +1,20 @@
 {
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for a distribution",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "distribution",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatealias": {
     "name": "AssociateAlias",
     "description": "Grants permission to associate an alias to a CloudFront distribution",
@@ -33,6 +49,24 @@
       "cloudfront:GetDistribution"
     ]
   },
+  "createanycastiplist": {
+    "name": "CreateAnycastIpList",
+    "description": "Grants permission to create an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcachepolicy": {
     "name": "CreateCachePolicy",
     "description": "Grants permission to add a new cache policy to CloudFront",
@@ -273,6 +307,32 @@
     ],
     "dependentActions": []
   },
+  "createvpcorigin": {
+    "name": "CreateVpcOrigin",
+    "description": "Grants permission to create a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteanycastiplist": {
+    "name": "DeleteAnycastIpList",
+    "description": "Grants permission to delete an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecachepolicy": {
     "name": "DeleteCachePolicy",
     "description": "Grants permission to delete a cache policy",
@@ -492,6 +552,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletevpcorigin": {
+    "name": "DeleteVpcOrigin",
+    "description": "Grants permission to delete a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefunction": {
     "name": "DescribeFunction",
     "description": "Grants permission to get a CloudFront function summary",
@@ -522,6 +597,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getanycastiplist": {
+    "name": "GetAnycastIpList",
+    "description": "Grants permission to get an Anycast static IP list",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcachepolicy": {
     "name": "GetCachePolicy",
     "description": "Grants permission to get the cache policy",
@@ -916,6 +1006,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getvpcorigin": {
+    "name": "GetVpcOrigin",
+    "description": "Grants permission to get the information about a VPC origin",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listanycastiplists": {
+    "name": "ListAnycastIpLists",
+    "description": "Grants permission to list your Anycast static IP lists",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcachepolicies": {
     "name": "ListCachePolicies",
     "description": "Grants permission to list all cache policies that have been created in CloudFront for this account",
@@ -963,6 +1076,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyanycastiplistid": {
+    "name": "ListDistributionsByAnycastIpListId",
+    "description": "Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbycachepolicyid": {
     "name": "ListDistributionsByCachePolicyId",
     "description": "Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy",
@@ -1012,6 +1133,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyvpcoriginid": {
+    "name": "ListDistributionsByVpcOriginId",
+    "description": "Grants permission to list IDs for distributions associated with the specified VPC origin",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbywebaclid": {
     "name": "ListDistributionsByWebACLId",
     "description": "Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL",
@@ -1146,11 +1275,23 @@
     "description": "Grants permission to list tags for a CloudFront resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1165,6 +1306,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listvpcorigins": {
+    "name": "ListVpcOrigins",
+    "description": "Grants permission to list VPC origins",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishfunction": {
     "name": "PublishFunction",
     "description": "Grants permission to publish a CloudFront function",
@@ -1185,6 +1334,12 @@
     "description": "Grants permission to add tags to a CloudFront resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
@@ -1196,6 +1351,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1224,6 +1385,12 @@
     "description": "Grants permission to remove tags from a CloudFront resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
@@ -1235,6 +1402,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1469,5 +1642,20 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updatevpcorigin": {
+    "name": "UpdateVpcOrigin",
+    "description": "Grants permission to update a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/compute-optimizer.json

@@ -67,6 +67,16 @@
       "ecs:ListServices"
     ]
   },
+  "exportidlerecommendations": {
+    "name": "ExportIdleRecommendations",
+    "description": "Grants permission to export idle recommendations to S3 for the provided accounts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "compute-optimizer:GetIdleRecommendations"
+    ]
+  },
   "exportlambdafunctionrecommendations": {
     "name": "ExportLambdaFunctionRecommendations",
     "description": "Grants permission to export Lambda function recommendations to S3 for the provided accounts",
@@ -193,6 +203,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getidlerecommendations": {
+    "name": "GetIdleRecommendations",
+    "description": "Grants permission to get idle recommendations for the specified account(s)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getlambdafunctionrecommendations": {
     "name": "GetLambdaFunctionRecommendations",
     "description": "Grants permission to get recommendations for the provided Lambda functions",

package/data/actions/connect.json

@@ -567,7 +567,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -590,6 +591,25 @@
     ],
     "dependentActions": []
   },
+  "createcontactflowversion": {
+    "name": "CreateContactFlowVersion",
+    "description": "Grants permission to create a version a flow in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId",
+      "connect:FlowType"
+    ],
+    "dependentActions": []
+  },
   "createevaluationform": {
     "name": "CreateEvaluationForm",
     "description": "Grants permission to create an evaluation form in the specified Amazon Connect instance. The form can be used to define questions related to agent performance, and create sections to organize such questions. Question and section identifiers cannot be duplicated within the same evaluation form",
@@ -1197,7 +1217,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -1690,7 +1711,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -2816,6 +2838,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcontactflowversions": {
+    "name": "ListContactFlowVersions",
+    "description": "Grants permission to list all the versions a flow in an Amazon Connect instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId",
+      "connect:FlowType"
+    ],
+    "dependentActions": []
+  },
   "listcontactflows": {
     "name": "ListContactFlows",
     "description": "Grants permission to list contact flow resources in an Amazon Connect instance",
@@ -3863,7 +3904,8 @@
     ],
     "conditionKeys": [
       "connect:InstanceId",
-      "connect:SearchTag/${TagKey}"
+      "connect:SearchTag/${TagKey}",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -4962,7 +5004,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -4980,7 +5023,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -5034,7 +5078,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },

package/data/actions/datazone.json

@@ -119,6 +119,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createconnection": {
+    "name": "CreateConnection",
+    "description": "Grants permission to create connections",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createdataproduct": {
     "name": "CreateDataProduct",
     "description": "Grants permission to create data product",
@@ -324,6 +332,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteconnection": {
+    "name": "DeleteConnection",
+    "description": "Grants permission to delete connections",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedataproduct": {
     "name": "DeleteDataProduct",
     "description": "Grants permission to delete data product",
@@ -542,6 +558,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnection": {
+    "name": "GetConnection",
+    "description": "Grants permission to get connections",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdataproduct": {
     "name": "GetDataProduct",
     "description": "Grants permission to get data product",
@@ -581,6 +605,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdomainexecutionrolecredentials": {
+    "name": "GetDomainExecutionRoleCredentials",
+    "isPermissionOnly": true,
+    "description": "Grants permission to use features that require access to domain execution role credentials",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdomainsharingpolicy": {
     "name": "GetDomainSharingPolicy",
     "isPermissionOnly": true,
@@ -695,6 +728,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getjobrun": {
+    "name": "GetJobRun",
+    "description": "Grants permission to get job runs",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getlineageevent": {
+    "name": "GetLineageEvent",
+    "description": "Grants permission to get lineage events",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getlineagenode": {
     "name": "GetLineageNode",
     "description": "Grants permission to get the lineage node",
@@ -825,6 +874,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconnections": {
+    "name": "ListConnections",
+    "description": "Grants permission to list connections",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdataproductrevisions": {
     "name": "ListDataProductRevisions",
     "description": "Grants permission to list data product revisions",
@@ -938,6 +995,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listjobruns": {
+    "name": "ListJobRuns",
+    "description": "Grants permission to list job runs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listlineageevents": {
+    "name": "ListLineageEvents",
+    "description": "Grants permission to list lineage events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listlineagenodehistory": {
     "name": "ListLineageNodeHistory",
     "description": "Grants permission to list historical versions of lineage node",
@@ -1308,6 +1381,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateconnection": {
+    "name": "UpdateConnection",
+    "description": "Grants permission to update connections",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedatasource": {
     "name": "UpdateDataSource",
     "description": "Grants permission to update existing DataSource",