@cloud-copilot/iam-data 0.9.202411221 → 0.9.202411231

package/data/actions/s3express.json

@@ -130,6 +130,27 @@
     ],
     "dependentActions": []
   },
+  "getlifecycleconfiguration": {
+    "name": "GetLifecycleConfiguration",
+    "description": "Grants permission to return the lifecycle configuration information set on a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listallmydirectorybuckets": {
     "name": "ListAllMyDirectoryBuckets",
     "description": "Grants permission to list all directory buckets owned by the authenticated sender of the request",
@@ -185,5 +206,26 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "putlifecycleconfiguration": {
+    "name": "PutLifecycleConfiguration",
+    "description": "Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/ssm-quicksetup.json

@@ -22,7 +22,29 @@
     "name": "DeleteConfigurationManager",
     "description": "Grants permission to delete a configuration manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconfiguration": {
+    "name": "GetConfiguration",
+    "description": "Grants permission to get Quick Setup configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -30,7 +52,14 @@
     "name": "GetConfigurationManager",
     "description": "Grants permission to get a configuration manager",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -50,6 +79,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconfigurations": {
+    "name": "ListConfigurations",
+    "description": "Grants permission to list Quick Setup configurations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listquicksetuptypes": {
     "name": "ListQuickSetupTypes",
     "description": "Grants permission to list the available Quick Setup types",
@@ -112,7 +156,14 @@
     "name": "UpdateConfigurationDefinition",
     "description": "Grants permission to update a Quick Setup configuration definition",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -120,7 +171,14 @@
     "name": "UpdateConfigurationManager",
     "description": "Grants permission to update a Quick Setup configuration manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/ssm.json

@@ -986,6 +986,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "executeapi": {
+    "name": "ExecuteAPI",
+    "description": "Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the AWS Management Console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getautomationexecution": {
     "name": "GetAutomationExecution",
     "description": "Grants permission to view details of a specified Automation execution",
@@ -1110,6 +1118,14 @@
     ],
     "dependentActions": []
   },
+  "getexecutionpreview": {
+    "name": "GetExecutionPreview",
+    "description": "Grants permission to retrieve an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinventory": {
     "name": "GetInventory",
     "description": "Grants permission to view instance inventory details per the specified criteria",
@@ -1504,6 +1520,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listnodes": {
+    "name": "ListNodes",
+    "description": "Grants permission to view details about managed nodes based on specified filters",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resourcedatasync",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnodessummary": {
+    "name": "ListNodesSummary",
+    "description": "Grants permission to view summary information about managed nodes based on specified filters and aggregators",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resourcedatasync",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listopsitemevents": {
     "name": "ListOpsItemEvents",
     "description": "Grants permission to view details about OpsItemEvents",
@@ -2011,6 +2057,14 @@
     ],
     "dependentActions": []
   },
+  "startexecutionpreview": {
+    "name": "StartExecutionPreview",
+    "description": "Grants permission to create a preview showing the effects that running a specified Automation runbook would have on the targeted resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startsession": {
     "name": "StartSession",
     "description": "Grants permission to initiate a connection to a specified target for a Session Manager session",
@@ -2042,7 +2096,6 @@
       }
     ],
     "conditionKeys": [
-      "ssm:SessionDocumentAccessCheck",
       "ssm:resourceTag/${TagKey}",
       "aws:ResourceTag/${TagKey}"
     ],

package/data/conditionKeys/iot.json

@@ -19,6 +19,21 @@
     "description": "Filters access by the mode of the client for IoT Tunnel",
     "type": "String"
   },
+  "iot:commandexecutionparameterboolean/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and boolean value",
+    "type": "Bool"
+  },
+  "iot:commandexecutionparameternumber/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterNumber/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and numeric value",
+    "type": "Numeric"
+  },
+  "iot:commandexecutionparameterstring/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterString/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and string value",
+    "type": "String"
+  },
   "iot:delete": {
     "key": "iot:Delete",
     "description": "Filters access by a flag indicating whether or not to also delete an IoT Tunnel immediately when making iot:CloseTunnel request",

package/data/conditionKeys/iotfleetwise.json

@@ -19,6 +19,11 @@
     "description": "Filters access by campaign destination ARN, eg. an S3 bucket ARN or a Timestream ARN",
     "type": "ARN"
   },
+  "iotfleetwise:signals": {
+    "key": "iotfleetwise:Signals",
+    "description": "Filters access by fully qualified signal names",
+    "type": "ArrayOfString"
+  },
   "iotfleetwise:updatetodecodermanifestarn": {
     "key": "iotfleetwise:UpdateToDecoderManifestArn",
     "description": "Filters access by a list of IoT FleetWise Decoder Manifest ARNs",

package/data/conditionKeys/ssm.json

@@ -44,11 +44,6 @@
     "description": "Filters access by Systems Manager parameters created in a hierarchical structure",
     "type": "String"
   },
-  "ssm:sessiondocumentaccesscheck": {
-    "key": "ssm:SessionDocumentAccessCheck",
-    "description": "Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request",
-    "type": "Bool"
-  },
   "ssm:sourceinstancearn": {
     "key": "ssm:SourceInstanceARN",
     "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",

package/data/resourceTypes/chatbot.json

@@ -2,5 +2,9 @@
   "chatbotconfiguration": {
     "key": "ChatbotConfiguration",
     "arn": "arn:${Partition}:chatbot::${Account}:chat-configuration/${ConfigurationType}/${ChatbotConfigurationName}"
+  },
+  "custom-action": {
+    "key": "custom-action",
+    "arn": "arn:${Partition}:chatbot::${Account}:custom-action/${ActionName}"
   }
 }

package/data/resourceTypes/cloudtrail.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "dashboard": {
+    "key": "dashboard",
+    "arn": "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/${DashboardName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/iot.json

@@ -201,5 +201,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "command": {
+    "key": "command",
+    "arn": "arn:${Partition}:iot:${Region}:${Account}:command/${CommandId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/iotfleetwise.json

@@ -40,5 +40,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "statetemplate": {
+    "key": "statetemplate",
+    "arn": "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/${StateTemplateId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/ssm-quicksetup.json

@@ -1,7 +1,7 @@
 {
   "configuration-manager": {
     "key": "configuration-manager",
-    "arn": "arn:${Partition}:ssm-quicksetup::${Account}:configuration-manager/${ConfigurationManagerId}",
+    "arn": "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/${ConfigurationManagerId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411221",
+  "version": "0.9.202411231",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-22T04:49:31.068Z",
+  "updatedAt": "2024-11-23T12:43:08.712Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",