@cloud-copilot/iam-data 0.9.202411221 → 0.9.202411251

package/data/actions/ssm-quicksetup.json

@@ -22,7 +22,29 @@
     "name": "DeleteConfigurationManager",
     "description": "Grants permission to delete a configuration manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconfiguration": {
+    "name": "GetConfiguration",
+    "description": "Grants permission to get Quick Setup configuration",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -30,7 +52,14 @@
     "name": "GetConfigurationManager",
     "description": "Grants permission to get a configuration manager",
     "accessLevel": "Read",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -50,6 +79,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconfigurations": {
+    "name": "ListConfigurations",
+    "description": "Grants permission to list Quick Setup configurations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listquicksetuptypes": {
     "name": "ListQuickSetupTypes",
     "description": "Grants permission to list the available Quick Setup types",
@@ -112,7 +156,14 @@
     "name": "UpdateConfigurationDefinition",
     "description": "Grants permission to update a Quick Setup configuration definition",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -120,7 +171,14 @@
     "name": "UpdateConfigurationManager",
     "description": "Grants permission to update a Quick Setup configuration manager",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "configuration-manager",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/ssm.json

@@ -986,6 +986,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "executeapi": {
+    "name": "ExecuteAPI",
+    "description": "Grants permission to a Systems Manager delegated administrator to view related resource details about OpsItems across multiple AWS accounts in the AWS Management Console",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getautomationexecution": {
     "name": "GetAutomationExecution",
     "description": "Grants permission to view details of a specified Automation execution",
@@ -1110,6 +1118,14 @@
     ],
     "dependentActions": []
   },
+  "getexecutionpreview": {
+    "name": "GetExecutionPreview",
+    "description": "Grants permission to retrieve an existing preview that shows the effects that running a specified Automation runbook would have on the targeted resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getinventory": {
     "name": "GetInventory",
     "description": "Grants permission to view instance inventory details per the specified criteria",
@@ -1504,6 +1520,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listnodes": {
+    "name": "ListNodes",
+    "description": "Grants permission to view details about managed nodes based on specified filters",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resourcedatasync",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnodessummary": {
+    "name": "ListNodesSummary",
+    "description": "Grants permission to view summary information about managed nodes based on specified filters and aggregators",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "resourcedatasync",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listopsitemevents": {
     "name": "ListOpsItemEvents",
     "description": "Grants permission to view details about OpsItemEvents",
@@ -2011,6 +2057,14 @@
     ],
     "dependentActions": []
   },
+  "startexecutionpreview": {
+    "name": "StartExecutionPreview",
+    "description": "Grants permission to create a preview showing the effects that running a specified Automation runbook would have on the targeted resources",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startsession": {
     "name": "StartSession",
     "description": "Grants permission to initiate a connection to a specified target for a Session Manager session",
@@ -2042,7 +2096,6 @@
       }
     ],
     "conditionKeys": [
-      "ssm:SessionDocumentAccessCheck",
       "ssm:resourceTag/${TagKey}",
       "aws:ResourceTag/${TagKey}"
     ],

package/data/conditionKeys/bcm-pricing-calculator.json

@@ -0,0 +1,32 @@
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access by the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access by the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "bcm-pricing-calculator:bill-estimatebillestimateid": {
+    "key": "bcm-pricing-calculator:bill-estimateBillEstimateId",
+    "description": "bill-estimate resource billEstimateId identifier",
+    "type": "String"
+  },
+  "bcm-pricing-calculator:bill-scenariobillscenarioid": {
+    "key": "bcm-pricing-calculator:bill-scenarioBillScenarioId",
+    "description": "bill-scenario resource billScenarioId identifier",
+    "type": "String"
+  },
+  "bcm-pricing-calculator:workload-estimateworkloadestimateid": {
+    "key": "bcm-pricing-calculator:workload-estimateWorkloadEstimateId",
+    "description": "workload-estimate resource workloadEstimateId identifier",
+    "type": "String"
+  }
+}

package/data/conditionKeys/connect.json

@@ -14,6 +14,11 @@
     "description": "Filters access by using tag keys in the request",
     "type": "ArrayOfString"
   },
+  "connect:assignmenttype": {
+    "key": "connect:AssignmentType",
+    "description": "Filters access by restricting access to create contacts based on Assignment Type",
+    "type": "String"
+  },
   "connect:attributetype": {
     "key": "connect:AttributeType",
     "description": "Filters access by the attribute type of the Amazon Connect instance",

package/data/conditionKeys/iot.json

@@ -19,6 +19,21 @@
     "description": "Filters access by the mode of the client for IoT Tunnel",
     "type": "String"
   },
+  "iot:commandexecutionparameterboolean/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterBoolean/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and boolean value",
+    "type": "Bool"
+  },
+  "iot:commandexecutionparameternumber/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterNumber/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and numeric value",
+    "type": "Numeric"
+  },
+  "iot:commandexecutionparameterstring/${commandparametername}": {
+    "key": "iot:CommandExecutionParameterString/${CommandParameterName}",
+    "description": "Filters access by the command parameter name and string value",
+    "type": "String"
+  },
   "iot:delete": {
     "key": "iot:Delete",
     "description": "Filters access by a flag indicating whether or not to also delete an IoT Tunnel immediately when making iot:CloseTunnel request",

package/data/conditionKeys/iotfleetwise.json

@@ -19,6 +19,11 @@
     "description": "Filters access by campaign destination ARN, eg. an S3 bucket ARN or a Timestream ARN",
     "type": "ARN"
   },
+  "iotfleetwise:signals": {
+    "key": "iotfleetwise:Signals",
+    "description": "Filters access by fully qualified signal names",
+    "type": "ArrayOfString"
+  },
   "iotfleetwise:updatetodecodermanifestarn": {
     "key": "iotfleetwise:UpdateToDecoderManifestArn",
     "description": "Filters access by a list of IoT FleetWise Decoder Manifest ARNs",

package/data/conditionKeys/quicksight.json

@@ -14,6 +14,11 @@
     "description": "Filters access by tag keys",
     "type": "ArrayOfString"
   },
+  "identitystore:groupid": {
+    "key": "identitystore:GroupId",
+    "description": "Filters access by IdentityStore group ARN",
+    "type": "ARN"
+  },
   "quicksight:allowedembeddingdomains": {
     "key": "quicksight:AllowedEmbeddingDomains",
     "description": "Filters access by the allowed embedding domains",
@@ -29,6 +34,11 @@
     "description": "Filters access by the edition of QuickSight",
     "type": "String"
   },
+  "quicksight:group": {
+    "key": "quicksight:Group",
+    "description": "Filters access by QuickSight group ARN",
+    "type": "ARN"
+  },
   "quicksight:iamarn": {
     "key": "quicksight:IamArn",
     "description": "Filters access by IAM user or role ARN",

package/data/conditionKeys/s3.json

@@ -59,6 +59,11 @@
     "description": "Filters access by a specific job suspended cause (for example, AWAITING_CONFIRMATION) to cancelling suspended jobs",
     "type": "String"
   },
+  "s3:objectcreationoperation": {
+    "key": "s3:ObjectCreationOperation",
+    "description": "Filters access by whether or not the operation creates an object",
+    "type": "Bool"
+  },
   "s3:requestjoboperation": {
     "key": "s3:RequestJobOperation",
     "description": "Filters access by operation to creating jobs",
@@ -104,6 +109,16 @@
     "description": "Filters access by a specific replication destination region for targeted buckets of the AWS FIS action aws:s3:bucket-pause-replication",
     "type": "String"
   },
+  "s3:if-match": {
+    "key": "s3:if-match",
+    "description": "Filters access by the request's 'If-Match' conditional header",
+    "type": "String"
+  },
+  "s3:if-none-match": {
+    "key": "s3:if-none-match",
+    "description": "Filters access by the request's 'If-None-Match' conditional header",
+    "type": "String"
+  },
   "s3:isreplicationpauserequest": {
     "key": "s3:isReplicationPauseRequest",
     "description": "Filters access by request made via AWS FIS action aws:s3:bucket-pause-replication",

package/data/conditionKeys/ssm.json

@@ -44,11 +44,6 @@
     "description": "Filters access by Systems Manager parameters created in a hierarchical structure",
     "type": "String"
   },
-  "ssm:sessiondocumentaccesscheck": {
-    "key": "ssm:SessionDocumentAccessCheck",
-    "description": "Filters access by verifying that a user has permission to access either the default Session Manager configuration document or the custom configuration document specified in a request",
-    "type": "Bool"
-  },
   "ssm:sourceinstancearn": {
     "key": "ssm:SourceInstanceARN",
     "description": "Filters access by verifying the Amazon Resource Name (ARN) of the AWS Systems Manager's managed instance from which the request is made. This key is not present when the request comes from the managed instance authenticated with an IAM role associated with EC2 instance profile",

package/data/resourceTypes/bcm-pricing-calculator.json

@@ -0,0 +1,23 @@
+{
+  "bill-estimate": {
+    "key": "bill-estimate",
+    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-estimate/${BillEstimateId}",
+    "conditionKeys": [
+      "bcm-pricing-calculator:bill-estimateBillEstimateId"
+    ]
+  },
+  "bill-scenario": {
+    "key": "bill-scenario",
+    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-scenario/${BillScenarioId}",
+    "conditionKeys": [
+      "bcm-pricing-calculator:bill-scenarioBillScenarioId"
+    ]
+  },
+  "workload-estimate": {
+    "key": "workload-estimate",
+    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:workload-estimate/${WorkloadEstimateId}",
+    "conditionKeys": [
+      "bcm-pricing-calculator:workload-estimateWorkloadEstimateId"
+    ]
+  }
+}

package/data/resourceTypes/chatbot.json

@@ -2,5 +2,9 @@
   "chatbotconfiguration": {
     "key": "ChatbotConfiguration",
     "arn": "arn:${Partition}:chatbot::${Account}:chat-configuration/${ConfigurationType}/${ChatbotConfigurationName}"
+  },
+  "custom-action": {
+    "key": "custom-action",
+    "arn": "arn:${Partition}:chatbot::${Account}:custom-action/${ActionName}"
   }
 }

package/data/resourceTypes/cloudtrail.json

@@ -19,5 +19,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "dashboard": {
+    "key": "dashboard",
+    "arn": "arn:${Partition}:cloudtrail:${Region}:${Account}:dashboard/${DashboardName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/iot.json

@@ -201,5 +201,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "command": {
+    "key": "command",
+    "arn": "arn:${Partition}:iot:${Region}:${Account}:command/${CommandId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/iotfleetwise.json

@@ -40,5 +40,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "statetemplate": {
+    "key": "statetemplate",
+    "arn": "arn:${Partition}:iotfleetwise:${Region}:${Account}:state-template/${StateTemplateId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/profile.json

@@ -40,5 +40,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "event-triggers": {
+    "key": "event-triggers",
+    "arn": "arn:${Partition}:profile:${Region}:${Account}:domains/${DomainName}/event-triggers/${EventTriggerName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/quicksight.json

@@ -118,5 +118,19 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "brand": {
+    "key": "brand",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:brand/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  },
+  "custompermissions": {
+    "key": "custompermissions",
+    "arn": "arn:${Partition}:quicksight:${Region}:${Account}:custompermissions/${ResourceId}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/data/resourceTypes/ssm-quicksetup.json

@@ -1,7 +1,7 @@
 {
   "configuration-manager": {
     "key": "configuration-manager",
-    "arn": "arn:${Partition}:ssm-quicksetup::${Account}:configuration-manager/${ConfigurationManagerId}",
+    "arn": "arn:${Partition}:ssm-quicksetup:${Region}:${Account}:configuration-manager/${ConfigurationManagerId}",
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]

package/data/serviceNames.json

@@ -46,6 +46,7 @@
   "backup-storage": "AWS Backup storage",
   "batch": "AWS Batch",
   "bcm-data-exports": "AWS Billing And Cost Management Data Exports",
+  "bcm-pricing-calculator": "AWS Billing And Cost Management Pricing Calculator",
   "bedrock": "Amazon Bedrock",
   "billing": "AWS Billing",
   "billingconductor": "AWS Billing Conductor",

package/data/services.json

@@ -46,6 +46,7 @@
   "backup-storage",
   "batch",
   "bcm-data-exports",
+  "bcm-pricing-calculator",
   "bedrock",
   "billing",
   "billingconductor",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202411221",
+  "version": "0.9.202411251",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-11-22T04:49:31.068Z",
+  "updatedAt": "2024-11-25T04:47:16.782Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",