@cloud-copilot/iam-data 0.9.202411221 → 0.9.202411231

package/data/actions/iot.json

@@ -377,6 +377,24 @@
     ],
     "dependentActions": []
   },
+  "createcommand": {
+    "name": "CreateCommand",
+    "description": "Grants permission to create a command that can be used to start new executions against a device",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcustommetric": {
     "name": "CreateCustomMetric",
     "description": "Grants permission to create a custom metric for device side metric reporting and monitoring",
@@ -999,6 +1017,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecommand": {
+    "name": "DeleteCommand",
+    "description": "Grants permission to delete a command",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecommandexecution": {
+    "name": "DeleteCommandExecution",
+    "description": "Grants permission to delete a command execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecustommetric": {
     "name": "DeleteCustomMetric",
     "description": "Grants permission to deletes the specified custom metric from your AWS account",
@@ -2072,6 +2126,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcommand": {
+    "name": "GetCommand",
+    "description": "Grants permission to get the information about the command",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcommandexecution": {
+    "name": "GetCommandExecution",
+    "description": "Grants permission to get the information of a command execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteffectivepolicies": {
     "name": "GetEffectivePolicies",
     "description": "Grants permission to get effective policies",
@@ -2430,6 +2520,41 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcommandexecutions": {
+    "name": "ListCommandExecutions",
+    "description": "Grants permission to list commands executions in the account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcommands": {
+    "name": "ListCommands",
+    "description": "Grants permission to list commands in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcustommetrics": {
     "name": "ListCustomMetrics",
     "description": "Grants permission to list the custom metrics in your AWS account",
@@ -2807,6 +2932,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custommetric",
         "required": false,
@@ -3366,6 +3497,37 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startcommandexecution": {
+    "name": "StartCommandExecution",
+    "description": "Grants permission to start a new command execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iot:CommandExecutionParameterString/${CommandParameterName}",
+      "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+      "iot:CommandExecutionParameterNumber/${CommandParameterName}"
+    ],
+    "dependentActions": []
+  },
   "startdetectmitigationactionstask": {
     "name": "StartDetectMitigationActionsTask",
     "description": "Grants permission to start a Device Defender ML Detect mitigation actions task",
@@ -3449,6 +3611,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custommetric",
         "required": false,
@@ -3650,6 +3818,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custommetric",
         "required": false,
@@ -3869,6 +4043,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecommand": {
+    "name": "UpdateCommand",
+    "description": "Grants permission to update a command",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecustommetric": {
     "name": "UpdateCustomMetric",
     "description": "Grants permission to update the specified custom metric",

package/data/actions/iotfleetwise.json

@@ -210,6 +210,30 @@
     ],
     "dependentActions": []
   },
+  "createstatetemplate": {
+    "name": "CreateStateTemplate",
+    "description": "Grants permission to create a state template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "signalcatalog",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createvehicle": {
     "name": "CreateVehicle",
     "description": "Grants permission to create a vehicle",
@@ -318,6 +342,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletestatetemplate": {
+    "name": "DeleteStateTemplate",
+    "description": "Grants permission to delete a state template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevehicle": {
     "name": "DeleteVehicle",
     "description": "Grants permission to delete a vehicle",
@@ -354,6 +393,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "generatecommandpayload": {
+    "name": "GenerateCommandPayload",
+    "isPermissionOnly": true,
+    "description": "Grants permission to generate the payload for running a command on a vehicle",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "vehicle",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "statetemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iotfleetwise:Signals"
+    ],
+    "dependentActions": []
+  },
   "getcampaign": {
     "name": "GetCampaign",
     "description": "Grants permission to get summary information for a given campaign",
@@ -453,6 +516,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getstatetemplate": {
+    "name": "GetStateTemplate",
+    "description": "Grants permission to get summary information for a given state template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getvehicle": {
     "name": "GetVehicle",
     "description": "Grants permission to get summary information for a vehicle",
@@ -631,6 +709,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "liststatetemplates": {
+    "name": "ListStateTemplates",
+    "description": "Grants permission to list state templates",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
@@ -760,6 +846,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "statetemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vehicle",
         "required": false,
@@ -808,6 +900,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "statetemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vehicle",
         "required": false,
@@ -895,6 +993,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatestatetemplate": {
+    "name": "UpdateStateTemplate",
+    "description": "Grants permission to update the given state template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevehicle": {
     "name": "UpdateVehicle",
     "description": "Grants permission to update the vehicle",

package/data/actions/logs.json

@@ -225,6 +225,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteindexpolicy": {
+    "name": "DeleteIndexPolicy",
+    "description": "Grants permission to delete an index policy attached to a log group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteloganomalydetector": {
     "name": "DeleteLogAnomalyDetector",
     "description": "Grants permission to delete a log anomaly detector",
@@ -340,6 +348,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetransformer": {
+    "name": "DeleteTransformer",
+    "description": "Grants permission to delete a transformer associated with the specified log group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeaccountpolicies": {
     "name": "DescribeAccountPolicies",
     "description": "Grants permission to retrieve a data protection policy attached to an account",
@@ -396,6 +419,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefieldindexes": {
+    "name": "DescribeFieldIndexes",
+    "description": "Grants permission to return all the indexing attributes that are attached with the log groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeindexpolicies": {
+    "name": "DescribeIndexPolicies",
+    "description": "Grants permission to return all the index policies that are attached with the log groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeloggroups": {
     "name": "DescribeLogGroups",
     "description": "Grants permission to return all the log groups that are associated with the AWS account making the request",
@@ -662,6 +701,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettransformer": {
+    "name": "GetTransformer",
+    "description": "Grants permission to return transformer associated with the specified log group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "link": {
     "name": "Link",
     "isPermissionOnly": true,
@@ -728,6 +782,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listloggroupsforquery": {
+    "name": "ListLogGroupsForQuery",
+    "description": "Grants permission to return all the log groups that are associated with the specified query",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for the specified resource",
@@ -899,6 +961,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putindexpolicy": {
+    "name": "PutIndexPolicy",
+    "description": "Grants permission to attach an index policy at log group level to optimize search and query",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putlogevents": {
     "name": "PutLogEvents",
     "description": "Grants permission to upload a batch of log events to the specified log stream",
@@ -983,6 +1053,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puttransformer": {
+    "name": "PutTransformer",
+    "description": "Grants permission to create or update a transformer and associates it with the specified log group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startlivetail": {
     "name": "StartLiveTail",
     "description": "Grants permission to start a Live Tail session in CloudWatch Logs",
@@ -1104,6 +1189,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "testtransformer": {
+    "name": "TestTransformer",
+    "description": "Grants permission to test the transformer against a sample of log event messages",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "unmask": {
     "name": "Unmask",
     "isPermissionOnly": true,

package/data/actions/qapps.json

@@ -160,6 +160,32 @@
     ],
     "dependentActions": []
   },
+  "createpresignedurl": {
+    "name": "CreatePresignedUrl",
+    "description": "Grants permission to create a presigned URL for uploading a file to a Q App or Q App Session in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "qapp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "qapp-session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:UserIsAppOwner",
+      "qapps:AppIsPublished",
+      "qapps:UserIsSessionModerator",
+      "qapps:SessionIsShared"
+    ],
+    "dependentActions": []
+  },
   "createqapp": {
     "name": "CreateQApp",
     "description": "Grants permission to create Q App in the Q Business application environment",
@@ -242,6 +268,30 @@
     ],
     "dependentActions": []
   },
+  "describeqapppermissions": {
+    "name": "DescribeQAppPermissions",
+    "description": "Grants permission to get Q App sharing permissions in the Q Business application environment",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "qapp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:UserIsAppOwner",
+      "qapps:AppIsPublished"
+    ],
+    "dependentActions": []
+  },
   "disassociatelibraryitemreview": {
     "name": "DisassociateLibraryItemReview",
     "description": "Grants permission to disassociate a library item review in the Q Business application environment",
@@ -755,6 +805,30 @@
     ],
     "dependentActions": []
   },
+  "updateqapppermissions": {
+    "name": "UpdateQAppPermissions",
+    "description": "Grants permission to update Q App sharing permissions in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "qapp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:UserIsAppOwner",
+      "qapps:AppIsPublished"
+    ],
+    "dependentActions": []
+  },
   "updateqappsession": {
     "name": "UpdateQAppSession",
     "description": "Grants permission to update Q App session in the Q Business application environment",

package/data/actions/resiliencehub.json

@@ -352,6 +352,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemetricsexport": {
+    "name": "DescribeMetricsExport",
+    "description": "Grants permission to describe metrics export",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeresiliencypolicy": {
     "name": "DescribeResiliencyPolicy",
     "description": "Grants permission to describe resiliency policy",
@@ -570,6 +578,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmetrics": {
+    "name": "ListMetrics",
+    "description": "Grants permission to list metrics",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendationtemplates": {
     "name": "ListRecommendationTemplates",
     "description": "Grants permission to list recommendation templates",
@@ -785,6 +801,14 @@
     ],
     "dependentActions": []
   },
+  "startmetricsexport": {
+    "name": "StartMetricsExport",
+    "description": "Grants permission to start the metrics export",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startresourcegroupingrecommendationtask": {
     "name": "StartResourceGroupingRecommendationTask",
     "description": "Grants permission to start the grouping recommendation generation process",