@cloud-copilot/iam-data 0.9.202411251 → 0.9.202412071

package/data/actions/dsql.json

@@ -0,0 +1,191 @@
+{
+  "createcluster": {
+    "name": "CreateCluster",
+    "description": "Grants permission to create new clusters",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "iam:CreateServiceLinkedRole"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createmultiregionclusters": {
+    "name": "CreateMultiRegionClusters",
+    "description": "Grants permission to create multi-Region clusters. Creating multi-Region clusters also requires CreateCluster permission in each specified Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "dsql:CreateCluster"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "dsql:WitnessRegion"
+    ],
+    "dependentActions": []
+  },
+  "dbconnect": {
+    "name": "DbConnect",
+    "description": "Grants permission to connect to the database",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "dbconnectadmin": {
+    "name": "DbConnectAdmin",
+    "description": "Grants permission to connect to the database with admin role. Connecting with any other role requires DbConnect permission",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletecluster": {
+    "name": "DeleteCluster",
+    "description": "Grants permission to delete a cluster and all of its data",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletemultiregionclusters": {
+    "name": "DeleteMultiRegionClusters",
+    "description": "Grants permission to delete multi-Region clusters. Deleting multi-Region clusters also requires DeleteCluster permission in each specified Region",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "dsql:DeleteCluster"
+    ]
+  },
+  "getcluster": {
+    "name": "GetCluster",
+    "description": "Grants permission to get information about a cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listclusters": {
+    "name": "ListClusters",
+    "description": "Grants permission to retrieve a list of clusters",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list all tags on an Aurora DSQL resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to Aurora DSQL resources",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from Aurora DSQL resources",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatecluster": {
+    "name": "UpdateCluster",
+    "description": "Grants permission to modify cluster attributes",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "Cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/eks.json

@@ -126,7 +126,10 @@
       "eks:bootstrapClusterCreatorAdminPermissions",
       "eks:bootstrapSelfManagedAddons",
       "eks:authenticationMode",
-      "eks:supportType"
+      "eks:supportType",
+      "eks:computeConfigEnabled",
+      "eks:elasticLoadBalancingEnabled",
+      "eks:blockStorageEnabled"
     ],
     "dependentActions": []
   },
@@ -929,7 +932,10 @@
     ],
     "conditionKeys": [
       "eks:authenticationMode",
-      "eks:supportType"
+      "eks:supportType",
+      "eks:computeConfigEnabled",
+      "eks:elasticLoadBalancingEnabled",
+      "eks:blockStorageEnabled"
     ],
     "dependentActions": []
   },

package/data/actions/es.json

@@ -30,9 +30,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "adddirectquerydatasource": {
+    "name": "AddDirectQueryDataSource",
+    "description": "Grants permission to add the data source for the provided OpenSearch arns",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "addtags": {
     "name": "AddTags",
-    "description": "Grants permission to attach resource tags to an OpenSearch Service domain",
+    "description": "Grants permission to attach resource tags to an OpenSearch Service domain, data source, or application",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -41,6 +59,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "domain",
         "required": true,
@@ -276,6 +300,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletedirectquerydatasource": {
+    "name": "DeleteDirectQueryDataSource",
+    "description": "Grants permission to delete the data source for the provided OpenSearch arns",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletedomain": {
     "name": "DeleteDomain",
     "description": "Grants permission to delete an Amazon OpenSearch Service domain and all of its data",
@@ -818,6 +857,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getdirectquerydatasource": {
+    "name": "GetDirectQueryDataSource",
+    "description": "Grants permission to get the data source for the provided OpenSearch arns",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getdomainmaintenancestatus": {
     "name": "GetDomainMaintenanceStatus",
     "description": "Grants permission to retrieve the status of maintenance action for the node",
@@ -901,6 +955,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listdirectquerydatasources": {
+    "name": "ListDirectQueryDataSources",
+    "description": "Grants permission to retrieve a list of data source for the provided OpenSearch arns",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listdomainmaintenances": {
     "name": "ListDomainMaintenances",
     "description": "Grants permission to retrieve a list of maintenance actions for the OpenSearch Service domain",
@@ -996,7 +1065,7 @@
   },
   "listtags": {
     "name": "ListTags",
-    "description": "Grants permission to display all resource tags for an OpenSearch Service domain",
+    "description": "Grants permission to display all resource tags for an OpenSearch Service domain, data source, or application",
     "accessLevel": "Read",
     "resourceTypes": [
       {
@@ -1005,6 +1074,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "domain",
         "required": true,
@@ -1081,7 +1156,7 @@
   },
   "removetags": {
     "name": "RemoveTags",
-    "description": "Grants permission to remove resource tags from an OpenSearch Service domain",
+    "description": "Grants permission to remove resource tags from an OpenSearch Service domain, data source, or application",
     "accessLevel": "Tagging",
     "resourceTypes": [
       {
@@ -1090,6 +1165,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "domain",
         "required": true,
@@ -1185,6 +1266,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatedirectquerydatasource": {
+    "name": "UpdateDirectQueryDataSource",
+    "description": "Grants permission to update the data source for the provided OpenSearch arns",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "datasource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatedomainconfig": {
     "name": "UpdateDomainConfig",
     "description": "Grants permission to modify the configuration of an OpenSearch Service domain, such as the instance type or number of instances",

package/data/actions/glue.json

@@ -2438,6 +2438,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getjobupgradeanalysis": {
+    "name": "GetJobUpgradeAnalysis",
+    "description": "Grants permission to retrieve an upgrade analysis for a job",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getjobs": {
     "name": "GetJobs",
     "description": "Grants permission to retrieve all current jobs",
@@ -3450,6 +3465,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listjobupgradeanalyses": {
+    "name": "ListJobUpgradeAnalyses",
+    "description": "Grants permission to list upgrade analyses for a job",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listjobs": {
     "name": "ListJobs",
     "description": "Grants permission to retrieve all current jobs",
@@ -4118,6 +4148,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startjobupgradeanalysis": {
+    "name": "StartJobUpgradeAnalysis",
+    "description": "Grants permission to start running upgrade analysis for a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startmlevaluationtaskrun": {
     "name": "StartMLEvaluationTaskRun",
     "description": "Grants permission to start an Evaluation ML Task Run",
@@ -4251,6 +4296,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopjobupgradeanalysis": {
+    "name": "StopJobUpgradeAnalysis",
+    "description": "Grants permission to stop an on-going upgrade analysis for a job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopsession": {
     "name": "StopSession",
     "description": "Grants permission to stop an interactive session",
@@ -5074,6 +5134,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "upgradejob": {
+    "name": "UpgradeJob",
+    "description": "Grants permission to upgrade a job to the latest version",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "job",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "usegluestudio": {
     "name": "UseGlueStudio",
     "description": "Grants permission to use Glue Studio and access its internal APIs",

package/data/actions/imagebuilder.json

@@ -588,6 +588,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmarketplaceresource": {
+    "name": "GetMarketplaceResource",
+    "description": "Grants permission to retrieve Marketplace provided resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "component",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getworkflow": {
     "name": "GetWorkflow",
     "description": "Grants permission to view details about a workflow",

package/data/actions/invoicing.json

@@ -1,4 +1,43 @@
 {
+  "batchgetinvoiceprofile": {
+    "name": "BatchGetInvoiceProfile",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get invoice profile details for an account in your organization",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createinvoiceunit": {
+    "name": "CreateInvoiceUnit",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create an invoice unit for your organization",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deleteinvoiceunit": {
+    "name": "DeleteInvoiceUnit",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update an invoice unit for your organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "invoice-unit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "getinvoiceemaildeliverypreferences": {
     "name": "GetInvoiceEmailDeliveryPreferences",
     "isPermissionOnly": true,
@@ -17,6 +56,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getinvoiceunit": {
+    "name": "GetInvoiceUnit",
+    "isPermissionOnly": true,
+    "description": "Grants permission to get invoice units for your organization",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "invoice-unit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listinvoicesummaries": {
     "name": "ListInvoiceSummaries",
     "isPermissionOnly": true,
@@ -26,6 +81,32 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listinvoiceunits": {
+    "name": "ListInvoiceUnits",
+    "isPermissionOnly": true,
+    "description": "Grants permission to list invoice units for your organization",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "invoice-unit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "putinvoiceemaildeliverypreferences": {
     "name": "PutInvoiceEmailDeliveryPreferences",
     "isPermissionOnly": true,
@@ -34,5 +115,60 @@
     "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "invoice-unit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "invoice-unit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "updateinvoiceunit": {
+    "name": "UpdateInvoiceUnit",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update an invoice unit for your organization",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "invoice-unit",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
   }
 }