@cloud-copilot/iam-data 0.9.202411221 → 0.9.202411251

package/data/actions/iot.json

@@ -377,6 +377,24 @@
     ],
     "dependentActions": []
   },
+  "createcommand": {
+    "name": "CreateCommand",
+    "description": "Grants permission to create a command that can be used to start new executions against a device",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcustommetric": {
     "name": "CreateCustomMetric",
     "description": "Grants permission to create a custom metric for device side metric reporting and monitoring",
@@ -999,6 +1017,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecommand": {
+    "name": "DeleteCommand",
+    "description": "Grants permission to delete a command",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecommandexecution": {
+    "name": "DeleteCommandExecution",
+    "description": "Grants permission to delete a command execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecustommetric": {
     "name": "DeleteCustomMetric",
     "description": "Grants permission to deletes the specified custom metric from your AWS account",
@@ -2072,6 +2126,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getcommand": {
+    "name": "GetCommand",
+    "description": "Grants permission to get the information about the command",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getcommandexecution": {
+    "name": "GetCommandExecution",
+    "description": "Grants permission to get the information of a command execution",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "geteffectivepolicies": {
     "name": "GetEffectivePolicies",
     "description": "Grants permission to get effective policies",
@@ -2430,6 +2520,41 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcommandexecutions": {
+    "name": "ListCommandExecutions",
+    "description": "Grants permission to list commands executions in the account",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listcommands": {
+    "name": "ListCommands",
+    "description": "Grants permission to list commands in the account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcustommetrics": {
     "name": "ListCustomMetrics",
     "description": "Grants permission to list the custom metrics in your AWS account",
@@ -2807,6 +2932,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custommetric",
         "required": false,
@@ -3366,6 +3497,37 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startcommandexecution": {
+    "name": "StartCommandExecution",
+    "description": "Grants permission to start a new command execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "client",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "thing",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iot:CommandExecutionParameterString/${CommandParameterName}",
+      "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+      "iot:CommandExecutionParameterNumber/${CommandParameterName}"
+    ],
+    "dependentActions": []
+  },
   "startdetectmitigationactionstask": {
     "name": "StartDetectMitigationActionsTask",
     "description": "Grants permission to start a Device Defender ML Detect mitigation actions task",
@@ -3449,6 +3611,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custommetric",
         "required": false,
@@ -3650,6 +3818,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "command",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "custommetric",
         "required": false,
@@ -3869,6 +4043,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecommand": {
+    "name": "UpdateCommand",
+    "description": "Grants permission to update a command",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "command",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecustommetric": {
     "name": "UpdateCustomMetric",
     "description": "Grants permission to update the specified custom metric",

package/data/actions/iotfleetwise.json

@@ -210,6 +210,30 @@
     ],
     "dependentActions": []
   },
+  "createstatetemplate": {
+    "name": "CreateStateTemplate",
+    "description": "Grants permission to create a state template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "signalcatalog",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createvehicle": {
     "name": "CreateVehicle",
     "description": "Grants permission to create a vehicle",
@@ -318,6 +342,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletestatetemplate": {
+    "name": "DeleteStateTemplate",
+    "description": "Grants permission to delete a state template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevehicle": {
     "name": "DeleteVehicle",
     "description": "Grants permission to delete a vehicle",
@@ -354,6 +393,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "generatecommandpayload": {
+    "name": "GenerateCommandPayload",
+    "isPermissionOnly": true,
+    "description": "Grants permission to generate the payload for running a command on a vehicle",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "vehicle",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "statetemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "iotfleetwise:Signals"
+    ],
+    "dependentActions": []
+  },
   "getcampaign": {
     "name": "GetCampaign",
     "description": "Grants permission to get summary information for a given campaign",
@@ -453,6 +516,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getstatetemplate": {
+    "name": "GetStateTemplate",
+    "description": "Grants permission to get summary information for a given state template",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getvehicle": {
     "name": "GetVehicle",
     "description": "Grants permission to get summary information for a vehicle",
@@ -631,6 +709,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "liststatetemplates": {
+    "name": "ListStateTemplates",
+    "description": "Grants permission to list state templates",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list tags for a resource",
@@ -760,6 +846,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "statetemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vehicle",
         "required": false,
@@ -808,6 +900,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "statetemplate",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "vehicle",
         "required": false,
@@ -895,6 +993,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatestatetemplate": {
+    "name": "UpdateStateTemplate",
+    "description": "Grants permission to update the given state template",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "statetemplate",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevehicle": {
     "name": "UpdateVehicle",
     "description": "Grants permission to update the vehicle",

package/data/actions/logs.json

@@ -225,6 +225,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteindexpolicy": {
+    "name": "DeleteIndexPolicy",
+    "description": "Grants permission to delete an index policy attached to a log group",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteloganomalydetector": {
     "name": "DeleteLogAnomalyDetector",
     "description": "Grants permission to delete a log anomaly detector",
@@ -340,6 +348,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletetransformer": {
+    "name": "DeleteTransformer",
+    "description": "Grants permission to delete a transformer associated with the specified log group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeaccountpolicies": {
     "name": "DescribeAccountPolicies",
     "description": "Grants permission to retrieve a data protection policy attached to an account",
@@ -396,6 +419,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describefieldindexes": {
+    "name": "DescribeFieldIndexes",
+    "description": "Grants permission to return all the indexing attributes that are attached with the log groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeindexpolicies": {
+    "name": "DescribeIndexPolicies",
+    "description": "Grants permission to return all the index policies that are attached with the log groups",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeloggroups": {
     "name": "DescribeLogGroups",
     "description": "Grants permission to return all the log groups that are associated with the AWS account making the request",
@@ -662,6 +701,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "gettransformer": {
+    "name": "GetTransformer",
+    "description": "Grants permission to return transformer associated with the specified log group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "link": {
     "name": "Link",
     "isPermissionOnly": true,
@@ -728,6 +782,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listloggroupsforquery": {
+    "name": "ListLogGroupsForQuery",
+    "description": "Grants permission to return all the log groups that are associated with the specified query",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtagsforresource": {
     "name": "ListTagsForResource",
     "description": "Grants permission to list the tags for the specified resource",
@@ -899,6 +961,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putindexpolicy": {
+    "name": "PutIndexPolicy",
+    "description": "Grants permission to attach an index policy at log group level to optimize search and query",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putlogevents": {
     "name": "PutLogEvents",
     "description": "Grants permission to upload a batch of log events to the specified log stream",
@@ -983,6 +1053,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "puttransformer": {
+    "name": "PutTransformer",
+    "description": "Grants permission to create or update a transformer and associates it with the specified log group",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "log-group",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startlivetail": {
     "name": "StartLiveTail",
     "description": "Grants permission to start a Live Tail session in CloudWatch Logs",
@@ -1104,6 +1189,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "testtransformer": {
+    "name": "TestTransformer",
+    "description": "Grants permission to test the transformer against a sample of log event messages",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "unmask": {
     "name": "Unmask",
     "isPermissionOnly": true,

package/data/actions/profile.json

@@ -121,6 +121,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createeventtrigger": {
+    "name": "CreateEventTrigger",
+    "description": "Grants permission to create an event trigger in the domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-triggers",
+        "required": true,
+        "conditionKeys": [
+          "aws:RequestTag/${TagKey}",
+          "aws:TagKeys"
+        ],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createintegrationworkflow": {
     "name": "CreateIntegrationWorkflow",
     "description": "Grants permission to create an integration workflow in a domain",
@@ -295,6 +319,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteeventtrigger": {
+    "name": "DeleteEventTrigger",
+    "description": "Grants permission to delete an event trigger in the domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-triggers",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteintegration": {
     "name": "DeleteIntegration",
     "description": "Grants permission to delete a integration in a domain",
@@ -534,6 +579,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "geteventtrigger": {
+    "name": "GetEventTrigger",
+    "description": "Grants permission to get an event trigger in the domain",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-triggers",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getidentityresolutionjob": {
     "name": "GetIdentityResolutionJob",
     "description": "Grants permission to get an identity resolution job in a domain",
@@ -814,6 +880,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listeventtriggers": {
+    "name": "ListEventTriggers",
+    "description": "Grants permission to list all the event triggers in the domain",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listidentityresolutionjobs": {
     "name": "ListIdentityResolutionJobs",
     "description": "Grants permission to list identity resolution jobs in a domain",
@@ -1228,6 +1309,27 @@
       "iam:CreateServiceLinkedRole"
     ]
   },
+  "updateeventtrigger": {
+    "name": "UpdateEventTrigger",
+    "description": "Grants permission to update an event trigger in the domain",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "domains",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "event-triggers",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateprofile": {
     "name": "UpdateProfile",
     "description": "Grants permission to update a profile in the domain",