@cloud-copilot/iam-data 0.9.202411251 → 0.9.202412071

package/data/actions/chime.json

@@ -103,6 +103,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatevoiceconnectorconnect": {
+    "name": "AssociateVoiceConnectorConnect",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate the specified Amazon Connect instance with an Amazon Chime Voice Connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "authorizedirectory": {
     "name": "AuthorizeDirectory",
     "description": "Grants permission to authorize an Active Directory for your Amazon Chime Enterprise account",
@@ -489,6 +498,34 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createconnectanalyticsconnector": {
+    "name": "CreateConnectAnalyticsConnector",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create an Amazon Connect Analytics Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": [
+      "chime:CreateVoiceConnector"
+    ]
+  },
+  "createconnectcalltransferconnector": {
+    "name": "CreateConnectCallTransferConnector",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create an Amazon Connect Call Transfer Connector in the AWS account (tag-based access controls are only supported on voice-chime.<region>.amazonaws.com endpoints)",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": [
+      "chime:CreateVoiceConnector"
+    ]
+  },
   "createmediacapturepipeline": {
     "name": "CreateMediaCapturePipeline",
     "description": "Grants permission to create a media capture pipeline (tag-based access controls are only supported on media-pipelines-chime.<region>.amazonaws.com endpoints)",
@@ -735,7 +772,10 @@
       "aws:TagKeys",
       "aws:RequestTag/${TagKey}"
     ],
-    "dependentActions": []
+    "dependentActions": [
+      "chime:CreateConnectAnalyticsConnector",
+      "chime:CreateConnectCallTransferConnector"
+    ]
   },
   "createvoiceconnectorgroup": {
     "name": "CreateVoiceConnectorGroup",
@@ -1282,6 +1322,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletevoiceconnectorexternalsystemsconfiguration": {
+    "name": "DeleteVoiceConnectorExternalSystemsConfiguration",
+    "description": "Grants permission to delete the configuration of the external system that is connected with the specified Amazon Chime Voice Connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "voice-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletevoiceconnectorgroup": {
     "name": "DeleteVoiceConnectorGroup",
     "description": "Grants permission to delete the specified Amazon Chime Voice Connector Group",
@@ -1746,6 +1801,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatevoiceconnectorconnect": {
+    "name": "DisassociateVoiceConnectorConnect",
+    "isPermissionOnly": true,
+    "description": "Grants permission to disassociate the Amazon Connect instance from the specified Amazon Chime Voice Connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disconnectdirectory": {
     "name": "DisconnectDirectory",
     "description": "Grants permission to disconnect the Active Directory from your Amazon Chime Enterprise account",
@@ -2263,6 +2327,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getvoiceconnectorexternalsystemsconfiguration": {
+    "name": "GetVoiceConnectorExternalSystemsConfiguration",
+    "description": "Grants permission to get the configuration of the external system that is connected with the specified Amazon Chime Voice Connector",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "voice-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getvoiceconnectorgroup": {
     "name": "GetVoiceConnectorGroup",
     "description": "Grants permission to get details for the specified Amazon Chime Voice Connector Group",
@@ -3341,6 +3420,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putvoiceconnectorexternalsystemsconfiguration": {
+    "name": "PutVoiceConnectorExternalSystemsConfiguration",
+    "description": "Grants permission to update the configuration of the external system that is connected with the specified Amazon Chime Voice Connector",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "voice-connector",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putvoiceconnectorloggingconfiguration": {
     "name": "PutVoiceConnectorLoggingConfiguration",
     "description": "Grants permission to add logging configuration for the specified Amazon Chime Voice Connector",

package/data/actions/cleanrooms.json

@@ -179,6 +179,7 @@
       "aws:TagKeys"
     ],
     "dependentActions": [
+      "athena:GetTableMetadata",
       "glue:BatchGetPartition",
       "glue:GetDatabase",
       "glue:GetDatabases",

package/data/actions/config.json

@@ -1,4 +1,19 @@
 {
+  "associateresourcetypes": {
+    "name": "AssociateResourceTypes",
+    "description": "Grants permission to add all specified resource types to the RecordingGroup of configuration recorder and includes those resource types when recording",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetaggregateresourceconfig": {
     "name": "BatchGetAggregateResourceConfig",
     "description": "Grants permission to return the current configuration items for resources that are present in your AWS Config aggregator",
@@ -69,9 +84,16 @@
   },
   "deleteconfigurationrecorder": {
     "name": "DeleteConfigurationRecorder",
-    "description": "Grants permission to delete the configuration recorder",
+    "description": "Grants permission to delete the customer managed configuration recorder",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -190,6 +212,23 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteservicelinkedconfigurationrecorder": {
+    "name": "DeleteServiceLinkedConfigurationRecorder",
+    "description": "Grants permission to delete the service-linked configuration recorder",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "config:ConfigurationRecorderServicePrincipal"
+    ],
+    "dependentActions": []
+  },
   "deletestoredquery": {
     "name": "DeleteStoredQuery",
     "description": "Grants permission to delete the stored query for an AWS account in an AWS Region",
@@ -310,16 +349,34 @@
     "name": "DescribeConfigurationRecorderStatus",
     "description": "Grants permission to return the current status of the specified configuration recorder",
     "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "config:ConfigurationRecorderServicePrincipal"
+    ],
     "dependentActions": []
   },
   "describeconfigurationrecorders": {
     "name": "DescribeConfigurationRecorders",
     "description": "Grants permission to return the names of one or more specified configuration recorders",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "config:ConfigurationRecorderServicePrincipal"
+    ],
     "dependentActions": []
   },
   "describeconformancepackcompliance": {
@@ -455,6 +512,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociateresourcetypes": {
+    "name": "DisassociateResourceTypes",
+    "description": "Grants permission to remove all specified resource types from the RecordingGroup of configuration recorder and excludes these resource types when recording",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getaggregatecompliancedetailsbyconfigrule": {
     "name": "GetAggregateComplianceDetailsByConfigRule",
     "description": "Grants permission to return the evaluation results for the specified AWS Config rule for a specific resource in a rule",
@@ -713,6 +785,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listconfigurationrecorders": {
+    "name": "ListConfigurationRecorders",
+    "description": "Grants permission to list the configuration recorder summaries for an AWS account in an AWS Region",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconformancepackcompliancescores": {
     "name": "ListConformancePackComplianceScores",
     "description": "Grants permission to return the percentage of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations",
@@ -768,6 +848,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ConfigurationRecorder",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ConformancePack",
         "required": false,
@@ -856,11 +942,16 @@
   },
   "putconfigurationrecorder": {
     "name": "PutConfigurationRecorder",
-    "description": "Grants permission to create a new configuration recorder to record the selected resource configurations",
+    "description": "Grants permission to create or update a customer managed configuration recorder to record the selected resource configurations",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
   },
   "putconformancepack": {
     "name": "PutConformancePack",
@@ -996,6 +1087,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putservicelinkedconfigurationrecorder": {
+    "name": "PutServiceLinkedConfigurationRecorder",
+    "description": "Grants permission to create a new service-linked configuration recorder to record the resource configurations in scope for the linked service",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "config:ConfigurationRecorderServicePrincipal"
+    ],
+    "dependentActions": [
+      "iam:CreateServiceLinkedRole",
+      "iam:PassRole"
+    ]
+  },
   "putstoredquery": {
     "name": "PutStoredQuery",
     "description": "Grants permission to save a new query or updates an existing saved query",
@@ -1054,9 +1160,16 @@
   },
   "startconfigurationrecorder": {
     "name": "StartConfigurationRecorder",
-    "description": "Grants permission to start recording configurations of the AWS resources you have selected to record in your AWS account",
+    "description": "Grants permission to the customer managed configuration recorder to start recording configurations of the AWS resources you have selected to record in your AWS account",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1082,9 +1195,16 @@
   },
   "stopconfigurationrecorder": {
     "name": "StopConfigurationRecorder",
-    "description": "Grants permission to stop recording configurations of the AWS resources you have selected to record in your AWS account",
+    "description": "Grants permission to the customer managed configuration recorder to stop recording configurations of the AWS resources you have selected to record in your AWS account",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "ConfigurationRecorder",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -1111,6 +1231,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ConfigurationRecorder",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ConformancePack",
         "required": false,
@@ -1165,6 +1291,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "ConfigurationRecorder",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "ConformancePack",
         "required": false,

package/data/actions/connect-campaigns.json

@@ -256,6 +256,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putprofileoutboundrequestbatch": {
+    "name": "PutProfileOutboundRequestBatch",
+    "description": "Grants permission to create profile outbound requests for the specified campaign",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "campaign",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "resumecampaign": {
     "name": "ResumeCampaign",
     "description": "Grants permission to resume a campaign",

package/data/actions/connect.json

@@ -706,6 +706,10 @@
           "app-integrations:CreateEventIntegrationAssociation",
           "app-integrations:GetApplication",
           "cases:GetDomain",
+          "chime:AssociateVoiceConnectorConnect",
+          "chime:DisassociateVoiceConnectorConnect",
+          "chime:TagResource",
+          "chime:UntagResource",
           "connect:DescribeInstance",
           "ds:DescribeDirectories",
           "events:PutRule",
@@ -2707,7 +2711,9 @@
         "required": true,
         "conditionKeys": [],
         "dependentActions": [
-          "sms-voice:DescribePhoneNumbers"
+          "sms-voice:DescribePhoneNumbers",
+          "social-messaging:GetLinkedWhatsAppBusinessAccountPhoneNumber",
+          "social-messaging:TagResource"
         ]
       },
       {
@@ -4179,6 +4185,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "sendintegrationevent": {
+    "name": "SendIntegrationEvent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to send integration events using the Amazon Connect API",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sendoutboundemail": {
     "name": "SendOutboundEmail",
     "description": "Grants permission to send outbound email using the Amazon Connect API",
@@ -4300,6 +4315,30 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startemailcontact": {
+    "name": "StartEmailContact",
+    "description": "Grants permission to initiate an inbound email using the Amazon Connect API",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "instance",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "contact-flow",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "connect:InstanceId"
+    ],
+    "dependentActions": []
+  },
   "startforecastingplanningschedulingintegration": {
     "name": "StartForecastingPlanningSchedulingIntegration",
     "isPermissionOnly": true,

package/data/actions/datazone.json

@@ -261,7 +261,6 @@
   },
   "createprojectprofile": {
     "name": "CreateProjectProfile",
-    "isPermissionOnly": true,
     "description": "Grants permission to create a project profile",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -479,7 +478,6 @@
   },
   "deleteprojectprofile": {
     "name": "DeleteProjectProfile",
-    "isPermissionOnly": true,
     "description": "Grants permission to delete a project profile",
     "accessLevel": "Write",
     "resourceTypes": [],
@@ -778,7 +776,6 @@
   },
   "getprojectprofile": {
     "name": "GetProjectProfile",
-    "isPermissionOnly": true,
     "description": "Grants permission to get project profile details",
     "accessLevel": "Read",
     "resourceTypes": [],
@@ -1069,7 +1066,6 @@
   },
   "listprojectprofiles": {
     "name": "ListProjectProfiles",
-    "isPermissionOnly": true,
     "description": "Grants permission to list project profiles",
     "accessLevel": "List",
     "resourceTypes": [],
@@ -1514,7 +1510,6 @@
   },
   "updateprojectprofile": {
     "name": "UpdateProjectProfile",
-    "isPermissionOnly": true,
     "description": "Grants permission to update a project profile",
     "accessLevel": "Write",
     "resourceTypes": [],