@cloud-copilot/iam-data 0.9.202411211 → 0.9.202411221

package/data/actions/autoscaling.json

@@ -168,6 +168,8 @@
       }
     ],
     "conditionKeys": [
+      "autoscaling:CapacityReservationIds",
+      "autoscaling:CapacityReservationResourceGroupArns",
       "autoscaling:InstanceTypes",
       "autoscaling:LaunchConfigurationName",
       "autoscaling:LaunchTemplateVersionSpecified",
@@ -986,6 +988,8 @@
       }
     ],
     "conditionKeys": [
+      "autoscaling:CapacityReservationIds",
+      "autoscaling:CapacityReservationResourceGroupArns",
       "autoscaling:InstanceTypes",
       "autoscaling:LaunchConfigurationName",
       "autoscaling:LaunchTemplateVersionSpecified",

package/data/actions/bedrock.json

@@ -1228,6 +1228,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeinlineagent": {
+    "name": "InvokeInlineAgent",
+    "description": "Grants permission to send user input (text-only) to the inline agent for Bedrock",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokemodel": {
     "name": "InvokeModel",
     "description": "Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body",

package/data/actions/cloudfront.json

@@ -1,4 +1,20 @@
 {
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for a distribution",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "distribution",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatealias": {
     "name": "AssociateAlias",
     "description": "Grants permission to associate an alias to a CloudFront distribution",
@@ -33,6 +49,24 @@
       "cloudfront:GetDistribution"
     ]
   },
+  "createanycastiplist": {
+    "name": "CreateAnycastIpList",
+    "description": "Grants permission to create an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcachepolicy": {
     "name": "CreateCachePolicy",
     "description": "Grants permission to add a new cache policy to CloudFront",
@@ -273,6 +307,32 @@
     ],
     "dependentActions": []
   },
+  "createvpcorigin": {
+    "name": "CreateVpcOrigin",
+    "description": "Grants permission to create a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteanycastiplist": {
+    "name": "DeleteAnycastIpList",
+    "description": "Grants permission to delete an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecachepolicy": {
     "name": "DeleteCachePolicy",
     "description": "Grants permission to delete a cache policy",
@@ -492,6 +552,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletevpcorigin": {
+    "name": "DeleteVpcOrigin",
+    "description": "Grants permission to delete a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefunction": {
     "name": "DescribeFunction",
     "description": "Grants permission to get a CloudFront function summary",
@@ -522,6 +597,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getanycastiplist": {
+    "name": "GetAnycastIpList",
+    "description": "Grants permission to get an Anycast static IP list",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcachepolicy": {
     "name": "GetCachePolicy",
     "description": "Grants permission to get the cache policy",
@@ -916,6 +1006,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getvpcorigin": {
+    "name": "GetVpcOrigin",
+    "description": "Grants permission to get the information about a VPC origin",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listanycastiplists": {
+    "name": "ListAnycastIpLists",
+    "description": "Grants permission to list your Anycast static IP lists",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcachepolicies": {
     "name": "ListCachePolicies",
     "description": "Grants permission to list all cache policies that have been created in CloudFront for this account",
@@ -963,6 +1076,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyanycastiplistid": {
+    "name": "ListDistributionsByAnycastIpListId",
+    "description": "Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbycachepolicyid": {
     "name": "ListDistributionsByCachePolicyId",
     "description": "Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy",
@@ -1012,6 +1133,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyvpcoriginid": {
+    "name": "ListDistributionsByVpcOriginId",
+    "description": "Grants permission to list IDs for distributions associated with the specified VPC origin",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbywebaclid": {
     "name": "ListDistributionsByWebACLId",
     "description": "Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL",
@@ -1146,11 +1275,23 @@
     "description": "Grants permission to list tags for a CloudFront resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1165,6 +1306,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listvpcorigins": {
+    "name": "ListVpcOrigins",
+    "description": "Grants permission to list VPC origins",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishfunction": {
     "name": "PublishFunction",
     "description": "Grants permission to publish a CloudFront function",
@@ -1185,6 +1334,12 @@
     "description": "Grants permission to add tags to a CloudFront resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
@@ -1196,6 +1351,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1224,6 +1385,12 @@
     "description": "Grants permission to remove tags from a CloudFront resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
@@ -1235,6 +1402,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1469,5 +1642,20 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updatevpcorigin": {
+    "name": "UpdateVpcOrigin",
+    "description": "Grants permission to update a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/compute-optimizer.json

@@ -67,6 +67,16 @@
       "ecs:ListServices"
     ]
   },
+  "exportidlerecommendations": {
+    "name": "ExportIdleRecommendations",
+    "description": "Grants permission to export idle recommendations to S3 for the provided accounts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "compute-optimizer:GetIdleRecommendations"
+    ]
+  },
   "exportlambdafunctionrecommendations": {
     "name": "ExportLambdaFunctionRecommendations",
     "description": "Grants permission to export Lambda function recommendations to S3 for the provided accounts",
@@ -193,6 +203,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getidlerecommendations": {
+    "name": "GetIdleRecommendations",
+    "description": "Grants permission to get idle recommendations for the specified account(s)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getlambdafunctionrecommendations": {
     "name": "GetLambdaFunctionRecommendations",
     "description": "Grants permission to get recommendations for the provided Lambda functions",

package/data/actions/connect.json

@@ -567,7 +567,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -590,6 +591,25 @@
     ],
     "dependentActions": []
   },
+  "createcontactflowversion": {
+    "name": "CreateContactFlowVersion",
+    "description": "Grants permission to create a version a flow in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId",
+      "connect:FlowType"
+    ],
+    "dependentActions": []
+  },
   "createevaluationform": {
     "name": "CreateEvaluationForm",
     "description": "Grants permission to create an evaluation form in the specified Amazon Connect instance. The form can be used to define questions related to agent performance, and create sections to organize such questions. Question and section identifiers cannot be duplicated within the same evaluation form",
@@ -1197,7 +1217,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -1690,7 +1711,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -2816,6 +2838,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcontactflowversions": {
+    "name": "ListContactFlowVersions",
+    "description": "Grants permission to list all the versions a flow in an Amazon Connect instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId",
+      "connect:FlowType"
+    ],
+    "dependentActions": []
+  },
   "listcontactflows": {
     "name": "ListContactFlows",
     "description": "Grants permission to list contact flow resources in an Amazon Connect instance",
@@ -3863,7 +3904,8 @@
     ],
     "conditionKeys": [
       "connect:InstanceId",
-      "connect:SearchTag/${TagKey}"
+      "connect:SearchTag/${TagKey}",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -4962,7 +5004,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -4980,7 +5023,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -5034,7 +5078,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },

package/data/actions/elasticloadbalancing.json

@@ -336,6 +336,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describecapacityreservation": {
+    "name": "DescribeCapacityReservation",
+    "description": "Grants permission to describe the capacity reservation for a load balancer",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describelistenerattributes": {
     "name": "DescribeListenerAttributes",
     "description": "Grants permission to describe the attributes for the specified listener",
@@ -502,6 +510,30 @@
     ],
     "dependentActions": []
   },
+  "modifycapacityreservation": {
+    "name": "ModifyCapacityReservation",
+    "description": "Grants permission to modify the capacity reservation for a load balancer",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "loadbalancer/app/",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "loadbalancer/net/",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "elasticloadbalancing:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "modifylistener": {
     "name": "ModifyListener",
     "description": "Grants permission to modify the specified properties of the specified listener",

package/data/actions/xray.json

@@ -16,6 +16,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "canceltraceretrieval": {
+    "name": "CancelTraceRetrieval",
+    "description": "Grants permission to cancel an ongoing trace retrieval job initiated by StartTraceRetrieval using the provided RetrievalToken. A successful cancellation will return an HTTP 200 response",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "creategroup": {
     "name": "CreateGroup",
     "description": "Grants permission to create a group resource with a name and a filter expression",
@@ -136,6 +144,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindexingrules": {
+    "name": "GetIndexingRules",
+    "description": "Grants permission to retrieve all indexing rules. Indexing rules are used to determine the server-side sampling rate for spans ingested through the CloudWatchLogs destination and indexed by X-Ray",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinsight": {
     "name": "GetInsight",
     "description": "Grants permission to retrieve the details of a specific insight",
@@ -168,6 +184,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getretrievedtracesgraph": {
+    "name": "GetRetrievedTracesGraph",
+    "description": "Grants permission to retrieve a service graph for traces based on the specified RetrievalToken from the Transaction Search CloudWatch log group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsamplingrules": {
     "name": "GetSamplingRules",
     "description": "Grants permission to retrieve all sampling rules",
@@ -216,6 +240,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettracesegmentdestination": {
+    "name": "GetTraceSegmentDestination",
+    "description": "Grants permission to retrieve the current destination of data sent to PutTraceSegments and OpenTelemetry API",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettracesummaries": {
     "name": "GetTraceSummaries",
     "description": "Grants permission to retrieve IDs and metadata for traces available for a specified time frame using an optional filter. To get the full traces, pass the trace IDs to BatchGetTraces",
@@ -241,6 +273,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listretrievedtraces": {
+    "name": "ListRetrievedTraces",
+    "description": "Grants permission to retrieve a list of traces for a given RetrievalToken from the Transaction Search CloudWatch log group",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for an X-Ray resource",
@@ -278,6 +318,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putspans": {
+    "name": "PutSpans",
+    "description": "Grants permission to upload OpenTelemetry spans to AWS X-Ray",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putspansforindexing": {
+    "name": "PutSpansForIndexing",
+    "isPermissionOnly": true,
+    "description": "Grants permission to upload spans to AWS X-Ray to be indexed",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "puttelemetryrecords": {
     "name": "PutTelemetryRecords",
     "description": "Grants permission to send AWS X-Ray daemon telemetry to the service",
@@ -294,6 +351,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "starttraceretrieval": {
+    "name": "StartTraceRetrieval",
+    "description": "Grants permission to initiate a trace retrieval process using the specified time range and for the given trace IDs on the Transaction Search CloudWatch log group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an X-Ray resource",
@@ -358,6 +423,14 @@
     ],
     "dependentActions": []
   },
+  "updateindexingrule": {
+    "name": "UpdateIndexingRule",
+    "description": "Grants permission to modify an indexing rule's configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatesamplingrule": {
     "name": "UpdateSamplingRule",
     "description": "Grants permission to modify a sampling rule's configuration",
@@ -374,5 +447,13 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updatetracesegmentdestination": {
+    "name": "UpdateTraceSegmentDestination",
+    "description": "Grants permission to modify the destination of data sent to PutTraceSegments and OpenTelemetry API",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/autoscaling.json

@@ -1,4 +1,14 @@
 {
+  "autoscaling:capacityreservationids": {
+    "key": "autoscaling:CapacityReservationIds",
+    "description": "Filters access based on the Capacity Reservation IDs",
+    "type": "ArrayOfString"
+  },
+  "autoscaling:capacityreservationresourcegrouparns": {
+    "key": "autoscaling:CapacityReservationResourceGroupArns",
+    "description": "Filters access based on the ARN of a Capacity Reservation resource group",
+    "type": "ArrayOfString"
+  },
   "autoscaling:imageid": {
     "key": "autoscaling:ImageId",
     "description": "Filters access based on the AMI ID for the launch configuration",

package/data/conditionKeys/connect.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the attribute type of the Amazon Connect instance",
     "type": "String"
   },
+  "connect:flowtype": {
+    "key": "connect:FlowType",
+    "description": "Filters access by Flow type",
+    "type": "ArrayOfString"
+  },
   "connect:instanceid": {
     "key": "connect:InstanceId",
     "description": "Filters access by restricting federation into specified Amazon Connect instances",

package/data/resourceTypes/cloudfront.json

@@ -56,5 +56,19 @@
   "continuous-deployment-policy": {
     "key": "continuous-deployment-policy",
     "arn": "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/${Id}"
+  },
+  "anycast-ip-list": {
+    "key": "anycast-ip-list",
+    "arn": "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpcorigin": {
+    "key": "vpcorigin",
+    "arn": "arn:${Partition}:cloudfront::${Account}:vpcorigin/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411211",
+  "version": "0.9.202411221",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-21T04:49:24.763Z",
+  "updatedAt": "2024-11-22T04:49:31.068Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",