@cloud-copilot/iam-data 0.9.202411211 → 0.9.202411231

package/data/actions/cloudfront.json

@@ -1,4 +1,20 @@
 {
+  "allowvendedlogdeliveryforresource": {
+    "name": "AllowVendedLogDeliveryForResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to configure vended log delivery for a distribution",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "distribution",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatealias": {
     "name": "AssociateAlias",
     "description": "Grants permission to associate an alias to a CloudFront distribution",
@@ -33,6 +49,24 @@
       "cloudfront:GetDistribution"
     ]
   },
+  "createanycastiplist": {
+    "name": "CreateAnycastIpList",
+    "description": "Grants permission to create an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcachepolicy": {
     "name": "CreateCachePolicy",
     "description": "Grants permission to add a new cache policy to CloudFront",
@@ -273,6 +307,32 @@
     ],
     "dependentActions": []
   },
+  "createvpcorigin": {
+    "name": "CreateVpcOrigin",
+    "description": "Grants permission to create a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteanycastiplist": {
+    "name": "DeleteAnycastIpList",
+    "description": "Grants permission to delete an Anycast static IP list",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecachepolicy": {
     "name": "DeleteCachePolicy",
     "description": "Grants permission to delete a cache policy",
@@ -492,6 +552,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletevpcorigin": {
+    "name": "DeleteVpcOrigin",
+    "description": "Grants permission to delete a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describefunction": {
     "name": "DescribeFunction",
     "description": "Grants permission to get a CloudFront function summary",
@@ -522,6 +597,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getanycastiplist": {
+    "name": "GetAnycastIpList",
+    "description": "Grants permission to get an Anycast static IP list",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getcachepolicy": {
     "name": "GetCachePolicy",
     "description": "Grants permission to get the cache policy",
@@ -916,6 +1006,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getvpcorigin": {
+    "name": "GetVpcOrigin",
+    "description": "Grants permission to get the information about a VPC origin",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listanycastiplists": {
+    "name": "ListAnycastIpLists",
+    "description": "Grants permission to list your Anycast static IP lists",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcachepolicies": {
     "name": "ListCachePolicies",
     "description": "Grants permission to list all cache policies that have been created in CloudFront for this account",
@@ -963,6 +1076,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyanycastiplistid": {
+    "name": "ListDistributionsByAnycastIpListId",
+    "description": "Grants permission to list the distributions in your account that are associated with the specified AnycastIpListId",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbycachepolicyid": {
     "name": "ListDistributionsByCachePolicyId",
     "description": "Grants permission to list distribution IDs for distributions that have a cache behavior that's associated with the specified cache policy",
@@ -1012,6 +1133,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdistributionsbyvpcoriginid": {
+    "name": "ListDistributionsByVpcOriginId",
+    "description": "Grants permission to list IDs for distributions associated with the specified VPC origin",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdistributionsbywebaclid": {
     "name": "ListDistributionsByWebACLId",
     "description": "Grants permission to list the distributions associated with your AWS account with given AWS WAF web ACL",
@@ -1146,11 +1275,23 @@
     "description": "Grants permission to list tags for a CloudFront resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1165,6 +1306,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listvpcorigins": {
+    "name": "ListVpcOrigins",
+    "description": "Grants permission to list VPC origins",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "publishfunction": {
     "name": "PublishFunction",
     "description": "Grants permission to publish a CloudFront function",
@@ -1185,6 +1334,12 @@
     "description": "Grants permission to add tags to a CloudFront resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
@@ -1196,6 +1351,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1224,6 +1385,12 @@
     "description": "Grants permission to remove tags from a CloudFront resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "anycast-ip-list",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "distribution",
         "required": false,
@@ -1235,6 +1402,12 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "vpcorigin",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1469,5 +1642,20 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "updatevpcorigin": {
+    "name": "UpdateVpcOrigin",
+    "description": "Grants permission to update a VPC origin",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "vpcorigin",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/actions/cloudtrail.json

@@ -1,7 +1,7 @@
 {
   "addtags": {
     "name": "AddTags",
-    "description": "Grants permission to add one or more tags to a trail, event data store, or channel, up to a limit of 50",
+    "description": "Grants permission to add one or more tags to a trail, event data store, channel or dashboard, up to a limit of 50",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -10,6 +10,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "eventdatastore",
         "required": false,
@@ -70,6 +76,28 @@
     ],
     "dependentActions": []
   },
+  "createdashboard": {
+    "name": "CreateDashboard",
+    "description": "Grants permission to create a dashboard",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "cloudtrail:AddTags",
+          "cloudtrail:StartDashboardRefresh",
+          "cloudtrail:StartQuery"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createeventdatastore": {
     "name": "CreateEventDataStore",
     "description": "Grants permission to create an event data store",
@@ -149,6 +177,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletedashboard": {
+    "name": "DeleteDashboard",
+    "description": "Grants permission to delete a dashboard",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteeventdatastore": {
     "name": "DeleteEventDataStore",
     "description": "Grants permission to delete an event data store",
@@ -171,7 +214,19 @@
     "resourceTypes": [
       {
         "name": "channel",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "eventdatastore",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -337,6 +392,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdashboard": {
+    "name": "GetDashboard",
+    "description": "Grants permission to list settings for the dashboard",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteventdatastore": {
     "name": "GetEventDataStore",
     "description": "Grants permission to list settings for the event data store",
@@ -439,7 +509,19 @@
     "resourceTypes": [
       {
         "name": "channel",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "eventdatastore",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -501,6 +583,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdashboards": {
+    "name": "ListDashboards",
+    "description": "Grants permission to list dashboards associated with the current region for your account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listeventdatastores": {
     "name": "ListEventDataStores",
     "description": "Grants permission to list event data stores associated with the current region for your account",
@@ -559,7 +649,7 @@
   },
   "listtags": {
     "name": "ListTags",
-    "description": "Grants permission to list the tags for trails, event data stores, or channels in the current region",
+    "description": "Grants permission to list the tags for trails, event data stores, channels or dashboards in the current region",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -568,6 +658,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "eventdatastore",
         "required": false,
@@ -643,7 +739,19 @@
     "resourceTypes": [
       {
         "name": "channel",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "eventdatastore",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -666,7 +774,7 @@
   },
   "removetags": {
     "name": "RemoveTags",
-    "description": "Grants permission to remove tags from a trail, event data store, or channel",
+    "description": "Grants permission to remove tags from a trail, event data store, channel or dashboard",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -675,6 +783,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "eventdatastore",
         "required": false,
@@ -708,6 +822,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startdashboardrefresh": {
+    "name": "StartDashboardRefresh",
+    "description": "Grants permission to start a refresh on the specified dashboard",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "cloudtrail:StartQuery"
+    ]
+  },
   "starteventdatastoreingestion": {
     "name": "StartEventDataStoreIngestion",
     "description": "Grants permission to start ingestion on an event data store",
@@ -817,6 +948,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedashboard": {
+    "name": "UpdateDashboard",
+    "description": "Grants permission to update a dashboard",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "dashboard",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "cloudtrail:StartDashboardRefresh",
+      "cloudtrail:StartQuery"
+    ]
+  },
   "updateeventdatastore": {
     "name": "UpdateEventDataStore",
     "description": "Grants permission to update an event data store",

package/data/actions/compute-optimizer.json

@@ -67,6 +67,16 @@
       "ecs:ListServices"
     ]
   },
+  "exportidlerecommendations": {
+    "name": "ExportIdleRecommendations",
+    "description": "Grants permission to export idle recommendations to S3 for the provided accounts",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "compute-optimizer:GetIdleRecommendations"
+    ]
+  },
   "exportlambdafunctionrecommendations": {
     "name": "ExportLambdaFunctionRecommendations",
     "description": "Grants permission to export Lambda function recommendations to S3 for the provided accounts",
@@ -193,6 +203,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getidlerecommendations": {
+    "name": "GetIdleRecommendations",
+    "description": "Grants permission to get idle recommendations for the specified account(s)",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getlambdafunctionrecommendations": {
     "name": "GetLambdaFunctionRecommendations",
     "description": "Grants permission to get recommendations for the provided Lambda functions",

package/data/actions/connect.json

@@ -567,7 +567,8 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -590,6 +591,25 @@
     ],
     "dependentActions": []
   },
+  "createcontactflowversion": {
+    "name": "CreateContactFlowVersion",
+    "description": "Grants permission to create a version a flow in an Amazon Connect instance",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId",
+      "connect:FlowType"
+    ],
+    "dependentActions": []
+  },
   "createevaluationform": {
     "name": "CreateEvaluationForm",
     "description": "Grants permission to create an evaluation form in the specified Amazon Connect instance. The form can be used to define questions related to agent performance, and create sections to organize such questions. Question and section identifiers cannot be duplicated within the same evaluation form",
@@ -1197,7 +1217,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -1690,7 +1711,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -2816,6 +2838,25 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcontactflowversions": {
+    "name": "ListContactFlowVersions",
+    "description": "Grants permission to list all the versions a flow in an Amazon Connect instance",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "contact-flow",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId",
+      "connect:FlowType"
+    ],
+    "dependentActions": []
+  },
   "listcontactflows": {
     "name": "ListContactFlows",
     "description": "Grants permission to list contact flow resources in an Amazon Connect instance",
@@ -3863,7 +3904,8 @@
     ],
     "conditionKeys": [
       "connect:InstanceId",
-      "connect:SearchTag/${TagKey}"
+      "connect:SearchTag/${TagKey}",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -4962,7 +5004,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -4980,7 +5023,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },
@@ -5034,7 +5078,8 @@
     ],
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}",
-      "connect:InstanceId"
+      "connect:InstanceId",
+      "connect:FlowType"
     ],
     "dependentActions": []
   },