@cloud-copilot/iam-data 0.9.202411201 → 0.9.202411221

package/data/actions/elasticloadbalancing.json

@@ -336,6 +336,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describecapacityreservation": {
+    "name": "DescribeCapacityReservation",
+    "description": "Grants permission to describe the capacity reservation for a load balancer",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describelistenerattributes": {
     "name": "DescribeListenerAttributes",
     "description": "Grants permission to describe the attributes for the specified listener",
@@ -502,6 +510,30 @@
     ],
     "dependentActions": []
   },
+  "modifycapacityreservation": {
+    "name": "ModifyCapacityReservation",
+    "description": "Grants permission to modify the capacity reservation for a load balancer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "loadbalancer/app/",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "loadbalancer/net/",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "elasticloadbalancing:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "modifylistener": {
     "name": "ModifyListener",
     "description": "Grants permission to modify the specified properties of the specified listener",

package/data/actions/glue.json

@@ -2053,6 +2053,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdashboardurl": {
+    "name": "GetDashboardUrl",
+    "description": "Grants permission to generate presigned url for accessing spark live UI",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "session",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdatacatalogencryptionsettings": {
     "name": "GetDataCatalogEncryptionSettings",
     "description": "Grants permission to retrieve catalog encryption settings",
@@ -2263,6 +2278,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getentityrecords": {
+    "name": "GetEntityRecords",
+    "description": "Grants permission to preview entity records in glue",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "catalog",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "connection",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getenvironment": {
     "name": "GetEnvironment",
     "description": "Grants permission to get environment details for SparkUI",
@@ -2287,6 +2323,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getgeneratedcode": {
+    "name": "GetGeneratedCode",
+    "description": "Transforms a directed acyclic graph (DAG) into code",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getintegrationresourceproperty": {
     "name": "GetIntegrationResourceProperty",
     "description": "Grants permission to retrieve the integration resource property",

package/data/actions/rds.json

@@ -143,6 +143,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -778,7 +784,9 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": []
+        "dependentActions": [
+          "rds:AddTagsToResource"
+        ]
       },
       {
         "name": "shardgrp",
@@ -787,7 +795,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createdbsnapshot": {
@@ -2226,6 +2237,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -2963,6 +2980,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "shardgrp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,

package/data/actions/sagemaker.json

@@ -295,6 +295,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "partner-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "pipeline",
         "required": false,
@@ -1527,6 +1533,41 @@
     ],
     "dependentActions": []
   },
+  "createpartnerapp": {
+    "name": "CreatePartnerApp",
+    "description": "Grants permission to create an Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createpartnerapppresignedurl": {
+    "name": "CreatePartnerAppPresignedUrl",
+    "description": "Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createpipeline": {
     "name": "CreatePipeline",
     "description": "Grants permission to create a pipeline",
@@ -2570,6 +2611,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletepartnerapp": {
+    "name": "DeletePartnerApp",
+    "description": "Grants permission to delete an Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletepipeline": {
     "name": "DeletePipeline",
     "description": "Grants permission to delete a pipeline",
@@ -2914,6 +2970,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "partner-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "pipeline",
         "required": false,
@@ -3819,6 +3881,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describepartnerapp": {
+    "name": "DescribePartnerApp",
+    "description": "Grants permission to describe an Amazon SageMaker Partner AI App",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describepipeline": {
     "name": "DescribePipeline",
     "description": "Grants permission to get information about a pipeline",
@@ -4850,6 +4927,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listpartnerapps": {
+    "name": "ListPartnerApps",
+    "description": "Grants permission to list the Amazon SageMaker Partner AI Apps in your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpipelineexecutionsteps": {
     "name": "ListPipelineExecutionSteps",
     "description": "Grants permission to list steps for a pipeline execution",
@@ -5250,6 +5335,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "partner-app",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "pipeline",
         "required": false,
@@ -6382,6 +6473,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatepartnerapp": {
+    "name": "UpdatePartnerApp",
+    "description": "Grants permission to update an Amazon SageMaker Partner AI App",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatepipeline": {
     "name": "UpdatePipeline",
     "description": "Grants permission to update a pipeline",

package/data/actions/xray.json

@@ -16,6 +16,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "canceltraceretrieval": {
+    "name": "CancelTraceRetrieval",
+    "description": "Grants permission to cancel an ongoing trace retrieval job initiated by StartTraceRetrieval using the provided RetrievalToken. A successful cancellation will return an HTTP 200 response",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "creategroup": {
     "name": "CreateGroup",
     "description": "Grants permission to create a group resource with a name and a filter expression",
@@ -136,6 +144,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindexingrules": {
+    "name": "GetIndexingRules",
+    "description": "Grants permission to retrieve all indexing rules. Indexing rules are used to determine the server-side sampling rate for spans ingested through the CloudWatchLogs destination and indexed by X-Ray",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinsight": {
     "name": "GetInsight",
     "description": "Grants permission to retrieve the details of a specific insight",
@@ -168,6 +184,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getretrievedtracesgraph": {
+    "name": "GetRetrievedTracesGraph",
+    "description": "Grants permission to retrieve a service graph for traces based on the specified RetrievalToken from the Transaction Search CloudWatch log group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsamplingrules": {
     "name": "GetSamplingRules",
     "description": "Grants permission to retrieve all sampling rules",
@@ -216,6 +240,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettracesegmentdestination": {
+    "name": "GetTraceSegmentDestination",
+    "description": "Grants permission to retrieve the current destination of data sent to PutTraceSegments and OpenTelemetry API",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettracesummaries": {
     "name": "GetTraceSummaries",
     "description": "Grants permission to retrieve IDs and metadata for traces available for a specified time frame using an optional filter. To get the full traces, pass the trace IDs to BatchGetTraces",
@@ -241,6 +273,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listretrievedtraces": {
+    "name": "ListRetrievedTraces",
+    "description": "Grants permission to retrieve a list of traces for a given RetrievalToken from the Transaction Search CloudWatch log group",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for an X-Ray resource",
@@ -278,6 +318,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putspans": {
+    "name": "PutSpans",
+    "description": "Grants permission to upload OpenTelemetry spans to AWS X-Ray",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putspansforindexing": {
+    "name": "PutSpansForIndexing",
+    "isPermissionOnly": true,
+    "description": "Grants permission to upload spans to AWS X-Ray to be indexed",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "puttelemetryrecords": {
     "name": "PutTelemetryRecords",
     "description": "Grants permission to send AWS X-Ray daemon telemetry to the service",
@@ -294,6 +351,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "starttraceretrieval": {
+    "name": "StartTraceRetrieval",
+    "description": "Grants permission to initiate a trace retrieval process using the specified time range and for the given trace IDs on the Transaction Search CloudWatch log group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an X-Ray resource",
@@ -358,6 +423,14 @@
     ],
     "dependentActions": []
   },
+  "updateindexingrule": {
+    "name": "UpdateIndexingRule",
+    "description": "Grants permission to modify an indexing rule's configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatesamplingrule": {
     "name": "UpdateSamplingRule",
     "description": "Grants permission to modify a sampling rule's configuration",
@@ -374,5 +447,13 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updatetracesegmentdestination": {
+    "name": "UpdateTraceSegmentDestination",
+    "description": "Grants permission to modify the destination of data sent to PutTraceSegments and OpenTelemetry API",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/autoscaling.json

@@ -1,4 +1,14 @@
 {
+  "autoscaling:capacityreservationids": {
+    "key": "autoscaling:CapacityReservationIds",
+    "description": "Filters access based on the Capacity Reservation IDs",
+    "type": "ArrayOfString"
+  },
+  "autoscaling:capacityreservationresourcegrouparns": {
+    "key": "autoscaling:CapacityReservationResourceGroupArns",
+    "description": "Filters access based on the ARN of a Capacity Reservation resource group",
+    "type": "ArrayOfString"
+  },
   "autoscaling:imageid": {
     "key": "autoscaling:ImageId",
     "description": "Filters access based on the AMI ID for the launch configuration",

package/data/conditionKeys/connect.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the attribute type of the Amazon Connect instance",
     "type": "String"
   },
+  "connect:flowtype": {
+    "key": "connect:FlowType",
+    "description": "Filters access by Flow type",
+    "type": "ArrayOfString"
+  },
   "connect:instanceid": {
     "key": "connect:InstanceId",
     "description": "Filters access by restricting federation into specified Amazon Connect instances",

package/data/conditionKeys/ec2.json

@@ -289,6 +289,11 @@
     "description": "Filters access by the ARN of a launch template",
     "type": "ARN"
   },
+  "ec2:managedresourceoperator": {
+    "key": "ec2:ManagedResourceOperator",
+    "description": "Filters access by the presence of an EC2 operator provisioning a managed resource",
+    "type": "String"
+  },
   "ec2:metadatahttpendpoint": {
     "key": "ec2:MetadataHttpEndpoint",
     "description": "Filters access by whether the HTTP endpoint is enabled for the instance metadata service",

package/data/resourceTypes/cloudfront.json

@@ -56,5 +56,19 @@
   "continuous-deployment-policy": {
     "key": "continuous-deployment-policy",
     "arn": "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/${Id}"
+  },
+  "anycast-ip-list": {
+    "key": "anycast-ip-list",
+    "arn": "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpcorigin": {
+    "key": "vpcorigin",
+    "arn": "arn:${Partition}:cloudfront::${Account}:vpcorigin/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/ec2.json

@@ -314,6 +314,7 @@
       "ec2:InstanceType",
       "ec2:IsLaunchTemplateResource",
       "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
       "ec2:MetadataHttpEndpoint",
       "ec2:MetadataHttpPutResponseHopLimit",
       "ec2:MetadataHttpTokens",
@@ -471,6 +472,7 @@
       "ec2:Attribute/${AttributeName}",
       "ec2:IsLaunchTemplateResource",
       "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}"
     ]
@@ -628,6 +630,7 @@
       "ec2:AvailabilityZone",
       "ec2:IsLaunchTemplateResource",
       "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
       "ec2:NetworkInterfaceID",
       "ec2:Permission",
       "ec2:Region",
@@ -1032,6 +1035,7 @@
       "ec2:IsLaunchTemplateResource",
       "ec2:KmsKeyId",
       "ec2:LaunchTemplate",
+      "ec2:ManagedResourceOperator",
       "ec2:ParentSnapshot",
       "ec2:Region",
       "ec2:ResourceTag/${TagKey}",

package/data/resourceTypes/rds.json

@@ -9,7 +9,10 @@
   },
   "shardgrp": {
     "key": "shardgrp",
-    "arn": "arn:${Partition}:rds:${Region}:${Account}:shard-group:${DbShardGroupResourceId}"
+    "arn": "arn:${Partition}:rds:${Region}:${Account}:shard-group:${DbShardGroupResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "cluster-auto-backup": {
     "key": "cluster-auto-backup",

package/data/resourceTypes/sagemaker.json

@@ -470,5 +470,13 @@
       "aws:ResourceTag/${TagKey}",
       "sagemaker:ResourceTag/${TagKey}"
     ]
+  },
+  "partner-app": {
+    "key": "partner-app",
+    "arn": "arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/${AppId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "sagemaker:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411201",
+  "version": "0.9.202411221",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-20T04:49:22.137Z",
+  "updatedAt": "2024-11-22T04:49:31.068Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",