@cloud-copilot/iam-data 0.9.202411221 → 0.9.202411251

package/data/actions/q.json

@@ -137,6 +137,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdashboardmetrics": {
+    "name": "ListDashboardMetrics",
+    "isPermissionOnly": true,
+    "description": "Grants permission to read metrics to populate Amazon Q dashboard",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listpluginproviders": {
     "name": "ListPluginProviders",
     "isPermissionOnly": true,

package/data/actions/qapps.json

@@ -160,6 +160,32 @@
     ],
     "dependentActions": []
   },
+  "createpresignedurl": {
+    "name": "CreatePresignedUrl",
+    "description": "Grants permission to create a presigned URL for uploading a file to a Q App or Q App Session in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "qapp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "qapp-session",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:UserIsAppOwner",
+      "qapps:AppIsPublished",
+      "qapps:UserIsSessionModerator",
+      "qapps:SessionIsShared"
+    ],
+    "dependentActions": []
+  },
   "createqapp": {
     "name": "CreateQApp",
     "description": "Grants permission to create Q App in the Q Business application environment",
@@ -242,6 +268,30 @@
     ],
     "dependentActions": []
   },
+  "describeqapppermissions": {
+    "name": "DescribeQAppPermissions",
+    "description": "Grants permission to get Q App sharing permissions in the Q Business application environment",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "qapp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:UserIsAppOwner",
+      "qapps:AppIsPublished"
+    ],
+    "dependentActions": []
+  },
   "disassociatelibraryitemreview": {
     "name": "DisassociateLibraryItemReview",
     "description": "Grants permission to disassociate a library item review in the Q Business application environment",
@@ -755,6 +805,30 @@
     ],
     "dependentActions": []
   },
+  "updateqapppermissions": {
+    "name": "UpdateQAppPermissions",
+    "description": "Grants permission to update Q App sharing permissions in the Q Business application environment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "application",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "qapp",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "qapps:UserIsAppOwner",
+      "qapps:AppIsPublished"
+    ],
+    "dependentActions": []
+  },
   "updateqappsession": {
     "name": "UpdateQAppSession",
     "description": "Grants permission to update Q App session in the Q Business application environment",

package/data/actions/quicksight.json

@@ -118,12 +118,36 @@
     ],
     "dependentActions": []
   },
+  "createbrand": {
+    "name": "CreateBrand",
+    "description": "Grants permission to create an Amazon QuickSight brand",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcustompermissions": {
     "name": "CreateCustomPermissions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a custom permissions resource for restricting user access",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
+    "description": "Grants permission to create a QuickSight custom permissions resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custompermissions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -369,7 +393,10 @@
     "description": "Grants permission to add a group member to a role",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "quicksight:Group",
+      "identitystore:GroupId"
+    ],
     "dependentActions": []
   },
   "createtemplate": {
@@ -553,11 +580,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletebrand": {
+    "name": "DeleteBrand",
+    "description": "Grants permission to delete an Amazon QuickSight brand",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletebrandassignment": {
+    "name": "DeleteBrandAssignment",
+    "description": "Grants permission to delete a brand assignment",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecustompermissions": {
     "name": "DeleteCustomPermissions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to delete a custom permissions resource",
-    "accessLevel": "Permissions management",
+    "description": "Grants permission to delete a QuickSight custom permissions resource",
+    "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -792,7 +841,10 @@
     "description": "Grants permission to remove a group member from a role",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "quicksight:Group",
+      "identitystore:GroupId"
+    ],
     "dependentActions": []
   },
   "deletetemplate": {
@@ -918,6 +970,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteusercustompermission": {
+    "name": "DeleteUserCustomPermission",
+    "description": "Grants permission to remove the custom permission associated with a user",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevpcconnection": {
     "name": "DeleteVPCConnection",
     "description": "Grants permission to delete a vpc connection",
@@ -1034,12 +1101,56 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describebrand": {
+    "name": "DescribeBrand",
+    "description": "Grants permission to describe a brand",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "brand",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebrandassignment": {
+    "name": "DescribeBrandAssignment",
+    "description": "Grants permission to describe a brand assignment",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describebrandpublishedversion": {
+    "name": "DescribeBrandPublishedVersion",
+    "description": "Grants permission to describes the published version of the brand",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "brand",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecustompermissions": {
     "name": "DescribeCustomPermissions",
-    "isPermissionOnly": true,
     "description": "Grants permission to describe a custom permissions resource in a QuickSight account",
-    "accessLevel": "Write",
-    "resourceTypes": [],
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "custompermissions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1103,6 +1214,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describedashboardsqaconfiguration": {
+    "name": "DescribeDashboardsQAConfiguration",
+    "description": "Grants permission to describe dashboards qa configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describedataset": {
     "name": "DescribeDataSet",
     "description": "Grants permission to describe a dataset",
@@ -1726,11 +1845,18 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listbrands": {
+    "name": "ListBrands",
+    "description": "Grants permission to lists all brands in an Amazon QuickSight account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcustompermissions": {
     "name": "ListCustomPermissions",
-    "isPermissionOnly": true,
     "description": "Grants permission to list custom permissions resources in QuickSight account",
-    "accessLevel": "Write",
+    "accessLevel": "List",
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
@@ -2395,6 +2521,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "searchtopics": {
+    "name": "SearchTopics",
+    "description": "Grants permission to search for a sub-set of topics",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "topic",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "searchusers": {
     "name": "SearchUsers",
     "isPermissionOnly": true,
@@ -2496,12 +2637,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "brand",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "customization",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "custompermissions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "dashboard",
         "required": false,
@@ -2583,12 +2736,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "brand",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "customization",
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "custompermissions",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "dashboard",
         "required": false,
@@ -2702,12 +2867,56 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatebrand": {
+    "name": "UpdateBrand",
+    "description": "Grants permission to update a brand",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatebrandassignment": {
+    "name": "UpdateBrandAssignment",
+    "description": "Grants permission to update a brand assignment",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatebrandpublishedversion": {
+    "name": "UpdateBrandPublishedVersion",
+    "description": "Grants permission to update the published version of a brand",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "brand",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecustompermissions": {
     "name": "UpdateCustomPermissions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update a custom permissions resource",
-    "accessLevel": "Permissions management",
-    "resourceTypes": [],
+    "description": "Grants permission to update a QuickSight custom permissions resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "custompermissions",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -2771,6 +2980,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedashboardsqaconfiguration": {
+    "name": "UpdateDashboardsQAConfiguration",
+    "description": "Grants permission to update dashboards qa configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedataset": {
     "name": "UpdateDataSet",
     "description": "Grants permission to update a dataset",
@@ -3173,6 +3390,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateusercustompermission": {
+    "name": "UpdateUserCustomPermission",
+    "description": "Grants permission to update the custom permission associated with a user",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "user",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatevpcconnection": {
     "name": "UpdateVPCConnection",
     "description": "Grants permission to update a vpc connection",

package/data/actions/resiliencehub.json

@@ -352,6 +352,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemetricsexport": {
+    "name": "DescribeMetricsExport",
+    "description": "Grants permission to describe metrics export",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeresiliencypolicy": {
     "name": "DescribeResiliencyPolicy",
     "description": "Grants permission to describe resiliency policy",
@@ -570,6 +578,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmetrics": {
+    "name": "ListMetrics",
+    "description": "Grants permission to list metrics",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listrecommendationtemplates": {
     "name": "ListRecommendationTemplates",
     "description": "Grants permission to list recommendation templates",
@@ -785,6 +801,14 @@
     ],
     "dependentActions": []
   },
+  "startmetricsexport": {
+    "name": "StartMetricsExport",
+    "description": "Grants permission to start the metrics export",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startresourcegroupingrecommendationtask": {
     "name": "StartResourceGroupingRecommendationTask",
     "description": "Grants permission to start the grouping recommendation generation process",

package/data/actions/s3.json

@@ -1779,7 +1779,9 @@
       "s3:signatureAge",
       "s3:signatureversion",
       "s3:TlsVersion",
-      "s3:x-amz-content-sha256"
+      "s3:x-amz-content-sha256",
+      "s3:if-match",
+      "s3:if-none-match"
     ],
     "dependentActions": []
   },
@@ -2594,8 +2596,8 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
-          "S3:GetReplicationConfiguration",
-          "S3:PutReplicationConfiguration"
+          "s3:GetReplicationConfiguration",
+          "s3:PutReplicationConfiguration"
         ]
       }
     ],
@@ -3246,7 +3248,10 @@
       "s3:object-lock-mode",
       "s3:object-lock-retain-until-date",
       "s3:object-lock-remaining-retention-days",
-      "s3:object-lock-legal-hold"
+      "s3:object-lock-legal-hold",
+      "s3:if-match",
+      "s3:if-none-match",
+      "s3:ObjectCreationOperation"
     ],
     "dependentActions": []
   },

package/data/actions/s3express.json

@@ -130,6 +130,27 @@
     ],
     "dependentActions": []
   },
+  "getlifecycleconfiguration": {
+    "name": "GetLifecycleConfiguration",
+    "description": "Grants permission to return the lifecycle configuration information set on a directory bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listallmydirectorybuckets": {
     "name": "ListAllMyDirectoryBuckets",
     "description": "Grants permission to list all directory buckets owned by the authenticated sender of the request",
@@ -185,5 +206,26 @@
       "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
+  },
+  "putlifecycleconfiguration": {
+    "name": "PutLifecycleConfiguration",
+    "description": "Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
   }
 }