@cloud-copilot/iam-data 0.9.202411211 → 0.9.202411231

package/data/actions/resiliencehub.json

@@ -352,6 +352,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemetricsexport": {
+    "name": "DescribeMetricsExport",
+    "description": "Grants permission to describe metrics export",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeresiliencypolicy": {
     "name": "DescribeResiliencyPolicy",
     "description": "Grants permission to describe resiliency policy",
@@ -570,6 +578,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmetrics": {
+    "name": "ListMetrics",
+    "description": "Grants permission to list metrics",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendationtemplates": {
     "name": "ListRecommendationTemplates",
     "description": "Grants permission to list recommendation templates",
@@ -785,6 +801,14 @@
     ],
     "dependentActions": []
   },
+  "startmetricsexport": {
+    "name": "StartMetricsExport",
+    "description": "Grants permission to start the metrics export",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startresourcegroupingrecommendationtask": {
     "name": "StartResourceGroupingRecommendationTask",
     "description": "Grants permission to start the grouping recommendation generation process",

package/data/actions/s3express.json

@@ -130,6 +130,27 @@
     ],
     "dependentActions": []
   },
+  "getlifecycleconfiguration": {
+    "name": "GetLifecycleConfiguration",
+    "description": "Grants permission to return the lifecycle configuration information set on a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listallmydirectorybuckets": {
     "name": "ListAllMyDirectoryBuckets",
     "description": "Grants permission to list all directory buckets owned by the authenticated sender of the request",
@@ -185,5 +206,26 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "putlifecycleconfiguration": {
+    "name": "PutLifecycleConfiguration",
+    "description": "Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/ssm-quicksetup.json

@@ -22,7 +22,29 @@
     "name": "DeleteConfigurationManager",
     "description": "Grants permission to delete a configuration manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconfiguration": {
+    "name": "GetConfiguration",
+    "description": "Grants permission to get Quick Setup configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -30,7 +52,14 @@
     "name": "GetConfigurationManager",
     "description": "Grants permission to get a configuration manager",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -50,6 +79,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconfigurations": {
+    "name": "ListConfigurations",
+    "description": "Grants permission to list Quick Setup configurations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listquicksetuptypes": {
     "name": "ListQuickSetupTypes",
     "description": "Grants permission to list the available Quick Setup types",
@@ -112,7 +156,14 @@
     "name": "UpdateConfigurationDefinition",
     "description": "Grants permission to update a Quick Setup configuration definition",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -120,7 +171,14 @@
     "name": "UpdateConfigurationManager",
     "description": "Grants permission to update a Quick Setup configuration manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/ssm.json

@@ -986,6 +986,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "executeapi": {
+    "name": "ExecuteAPI",
+    "description": "Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the AWS Management Console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getautomationexecution": {
     "name": "GetAutomationExecution",
     "description": "Grants permission to view details of a specified Automation execution",
@@ -1110,6 +1118,14 @@
     ],
     "dependentActions": []
   },
+  "getexecutionpreview": {
+    "name": "GetExecutionPreview",
+    "description": "Grants permission to retrieve an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinventory": {
     "name": "GetInventory",
     "description": "Grants permission to view instance inventory details per the specified criteria",
@@ -1504,6 +1520,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listnodes": {
+    "name": "ListNodes",
+    "description": "Grants permission to view details about managed nodes based on specified filters",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resourcedatasync",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnodessummary": {
+    "name": "ListNodesSummary",
+    "description": "Grants permission to view summary information about managed nodes based on specified filters and aggregators",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resourcedatasync",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listopsitemevents": {
     "name": "ListOpsItemEvents",
     "description": "Grants permission to view details about OpsItemEvents",
@@ -2011,6 +2057,14 @@
     ],
     "dependentActions": []
   },
+  "startexecutionpreview": {
+    "name": "StartExecutionPreview",
+    "description": "Grants permission to create a preview showing the effects that running a specified Automation runbook would have on the targeted resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startsession": {
     "name": "StartSession",
     "description": "Grants permission to initiate a connection to a specified target for a Session Manager session",
@@ -2042,7 +2096,6 @@
       }
     ],
     "conditionKeys": [
-      "ssm:SessionDocumentAccessCheck",
       "ssm:resourceTag/${TagKey}",
       "aws:ResourceTag/${TagKey}"
     ],

package/data/actions/xray.json

@@ -16,6 +16,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "canceltraceretrieval": {
+    "name": "CancelTraceRetrieval",
+    "description": "Grants permission to cancel an ongoing trace retrieval job initiated by StartTraceRetrieval using the provided RetrievalToken. A successful cancellation will return an HTTP 200 response",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "creategroup": {
     "name": "CreateGroup",
     "description": "Grants permission to create a group resource with a name and a filter expression",
@@ -136,6 +144,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getindexingrules": {
+    "name": "GetIndexingRules",
+    "description": "Grants permission to retrieve all indexing rules. Indexing rules are used to determine the server-side sampling rate for spans ingested through the CloudWatchLogs destination and indexed by X-Ray",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinsight": {
     "name": "GetInsight",
     "description": "Grants permission to retrieve the details of a specific insight",
@@ -168,6 +184,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getretrievedtracesgraph": {
+    "name": "GetRetrievedTracesGraph",
+    "description": "Grants permission to retrieve a service graph for traces based on the specified RetrievalToken from the Transaction Search CloudWatch log group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getsamplingrules": {
     "name": "GetSamplingRules",
     "description": "Grants permission to retrieve all sampling rules",
@@ -216,6 +240,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettracesegmentdestination": {
+    "name": "GetTraceSegmentDestination",
+    "description": "Grants permission to retrieve the current destination of data sent to PutTraceSegments and OpenTelemetry API",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettracesummaries": {
     "name": "GetTraceSummaries",
     "description": "Grants permission to retrieve IDs and metadata for traces available for a specified time frame using an optional filter. To get the full traces, pass the trace IDs to BatchGetTraces",
@@ -241,6 +273,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listretrievedtraces": {
+    "name": "ListRetrievedTraces",
+    "description": "Grants permission to retrieve a list of traces for a given RetrievalToken from the Transaction Search CloudWatch log group",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for an X-Ray resource",
@@ -278,6 +318,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putspans": {
+    "name": "PutSpans",
+    "description": "Grants permission to upload OpenTelemetry spans to AWS X-Ray",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putspansforindexing": {
+    "name": "PutSpansForIndexing",
+    "isPermissionOnly": true,
+    "description": "Grants permission to upload spans to AWS X-Ray to be indexed",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "puttelemetryrecords": {
     "name": "PutTelemetryRecords",
     "description": "Grants permission to send AWS X-Ray daemon telemetry to the service",
@@ -294,6 +351,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "starttraceretrieval": {
+    "name": "StartTraceRetrieval",
+    "description": "Grants permission to initiate a trace retrieval process using the specified time range and for the given trace IDs on the Transaction Search CloudWatch log group",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "tagresource": {
     "name": "TagResource",
     "description": "Grants permission to add tags to an X-Ray resource",
@@ -358,6 +423,14 @@
     ],
     "dependentActions": []
   },
+  "updateindexingrule": {
+    "name": "UpdateIndexingRule",
+    "description": "Grants permission to modify an indexing rule's configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatesamplingrule": {
     "name": "UpdateSamplingRule",
     "description": "Grants permission to modify a sampling rule's configuration",
@@ -374,5 +447,13 @@
       "aws:ResourceTag/${TagKey}"
     ],
     "dependentActions": []
+  },
+  "updatetracesegmentdestination": {
+    "name": "UpdateTraceSegmentDestination",
+    "description": "Grants permission to modify the destination of data sent to PutTraceSegments and OpenTelemetry API",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
   }
 }

package/data/conditionKeys/autoscaling.json

@@ -1,4 +1,14 @@
 {
+  "autoscaling:capacityreservationids": {
+    "key": "autoscaling:CapacityReservationIds",
+    "description": "Filters access based on the Capacity Reservation IDs",
+    "type": "ArrayOfString"
+  },
+  "autoscaling:capacityreservationresourcegrouparns": {
+    "key": "autoscaling:CapacityReservationResourceGroupArns",
+    "description": "Filters access based on the ARN of a Capacity Reservation resource group",
+    "type": "ArrayOfString"
+  },
   "autoscaling:imageid": {
     "key": "autoscaling:ImageId",
     "description": "Filters access based on the AMI ID for the launch configuration",

package/data/conditionKeys/connect.json

@@ -19,6 +19,11 @@
     "description": "Filters access by the attribute type of the Amazon Connect instance",
     "type": "String"
   },
+  "connect:flowtype": {
+    "key": "connect:FlowType",
+    "description": "Filters access by Flow type",
+    "type": "ArrayOfString"
+  },
   "connect:instanceid": {
     "key": "connect:InstanceId",
     "description": "Filters access by restricting federation into specified Amazon Connect instances",

package/data/conditionKeys/iot.json

@@ -19,6 +19,21 @@
     "description": "Filters access by the mode of the client for IoT Tunnel",
     "type": "String"
   },
+  "iot:commandexecutionparameterboolean/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and boolean value",
+    "type": "Bool"
+  },
+  "iot:commandexecutionparameternumber/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterNumber/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and numeric value",
+    "type": "Numeric"
+  },
+  "iot:commandexecutionparameterstring/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterString/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and string value",
+    "type": "String"
+  },
   "iot:delete": {
     "key": "iot:Delete",
     "description": "Filters access by a flag indicating whether or not to also delete an IoT Tunnel immediately when making iot:CloseTunnel request",

package/data/conditionKeys/iotfleetwise.json

@@ -19,6 +19,11 @@
     "description": "Filters access by campaign destination ARN, eg. an S3 bucket ARN or a Timestream ARN",
     "type": "ARN"
   },
+  "iotfleetwise:signals": {
+    "key": "iotfleetwise:Signals",
+    "description": "Filters access by fully qualified signal names",
+    "type": "ArrayOfString"
+  },
   "iotfleetwise:updatetodecodermanifestarn": {
     "key": "iotfleetwise:UpdateToDecoderManifestArn",
     "description": "Filters access by a list of IoT FleetWise Decoder Manifest ARNs",

package/data/conditionKeys/ssm.json

@@ -44,11 +44,6 @@
     "description": "Filters access by Systems Manager parameters created in a hierarchical structure",
     "type": "String"
   },
-  "ssm:sessiondocumentaccesscheck": {
-    "key": "ssm:SessionDocumentAccessCheck",
-    "description": "Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request",
-    "type": "Bool"
-  },
   "ssm:sourceinstancearn": {
     "key": "ssm:SourceInstanceARN",
     "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",

package/data/resourceTypes/chatbot.json

@@ -2,5 +2,9 @@
   "chatbotconfiguration": {
     "key": "ChatbotConfiguration",
     "arn": "arn:${Partition}:chatbot::${Account}:chat-configuration/${ConfigurationType}/${ChatbotConfigurationName}"
+  },
+  "custom-action": {
+    "key": "custom-action",
+    "arn": "arn:${Partition}:chatbot::${Account}:custom-action/${ActionName}"
   }
 }

package/data/resourceTypes/cloudfront.json

@@ -56,5 +56,19 @@
   "continuous-deployment-policy": {
     "key": "continuous-deployment-policy",
     "arn": "arn:${Partition}:cloudfront::${Account}:continuous-deployment-policy/${Id}"
+  },
+  "anycast-ip-list": {
+    "key": "anycast-ip-list",
+    "arn": "arn:${Partition}:cloudfront::${Account}:anycast-ip-list/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "vpcorigin": {
+    "key": "vpcorigin",
+    "arn": "arn:${Partition}:cloudfront::${Account}:vpcorigin/${Id}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/cloudtrail.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "dashboard": {
+    "key": "dashboard",
+    "arn": "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/${DashboardName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/iot.json

@@ -201,5 +201,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "command": {
+    "key": "command",
+    "arn": "arn:${Partition}:iot:${Region}:${Account}:command/${CommandId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/iotfleetwise.json

@@ -40,5 +40,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "statetemplate": {
+    "key": "statetemplate",
+    "arn": "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/${StateTemplateId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/ssm-quicksetup.json

@@ -1,7 +1,7 @@
 {
   "configuration-manager": {
     "key": "configuration-manager",
-    "arn": "arn:${Partition}:ssm-quicksetup::${Account}:configuration-manager/${ConfigurationManagerId}",
+    "arn": "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/${ConfigurationManagerId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411211",
+  "version": "0.9.202411231",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-21T04:49:24.763Z",
+  "updatedAt": "2024-11-23T12:43:08.712Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",