@cloud-copilot/iam-data 0.9.202411251 → 0.9.202412071

package/data/actions/redshift-serverless.json

@@ -326,6 +326,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getmanagedworkgroup": {
+    "name": "GetManagedWorkgroup",
+    "description": "Grants permission to create a Amazon Redshift Managed Serverless workgroup with the specified configuration settings",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "managed-workgroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getnamespace": {
     "name": "GetNamespace",
     "description": "Grants permission to get information about a namespace in Amazon Redshift Serverless",
@@ -441,6 +456,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmanagedworkgroups": {
+    "name": "ListManagedWorkgroups",
+    "description": "Grants permission to list managed workgroups in Amazon Redshift Serverless",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listnamespaces": {
     "name": "ListNamespaces",
     "description": "Grants permission to list namespaces in Amazon Redshift Serverless",

package/data/actions/redshift.json

@@ -1025,6 +1025,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deregisternamespace": {
+    "name": "DeregisterNamespace",
+    "description": "Grants permission to deregister the specified namespace from a consumer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeaccountattributes": {
     "name": "DescribeAccountAttributes",
     "description": "Grants permission to describe attributes attached to the specified AWS account",
@@ -2135,6 +2143,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "registernamespace": {
+    "name": "RegisterNamespace",
+    "description": "Grants permission to register the specified namespace to a consumer",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "rejectdatashare": {
     "name": "RejectDataShare",
     "description": "Grants permission to decline a datashare shared from another account",

package/data/actions/rekognition.json

@@ -50,14 +50,7 @@
     "name": "CreateCollection",
     "description": "Grants permission to create a collection in an AWS Region",
     "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "collection",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
+    "resourceTypes": [],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys"
@@ -76,7 +69,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createfacelivenesssession": {
@@ -99,7 +95,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createprojectversion": {
@@ -632,9 +631,33 @@
     "description": "Grants permission to return a list of tags associated with a resource",
     "accessLevel": "Read",
     "resourceTypes": [
+      {
+        "name": "collection",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "projectversion",
-        "required": true,
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "streamprocessor",
+        "required": false,
         "conditionKeys": [],
         "dependentActions": []
       }
@@ -905,6 +928,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "projectversion",
         "required": false,
@@ -935,6 +970,18 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dataset",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "project",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "projectversion",
         "required": false,

package/data/actions/s3.json

@@ -249,6 +249,33 @@
     ],
     "dependentActions": []
   },
+  "createbucketmetadatatableconfiguration": {
+    "name": "CreateBucketMetadataTableConfiguration",
+    "description": "Grants permission to create a new S3 Metadata configuration for a specified bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "s3tables:CreateNamespace",
+          "s3tables:CreateTable",
+          "s3tables:GetTable",
+          "s3tables:PutTablePolicy"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "createjob": {
     "name": "CreateJob",
     "description": "Grants permission to create a new Amazon S3 Batch Operations job",
@@ -525,6 +552,28 @@
     ],
     "dependentActions": []
   },
+  "deletebucketmetadatatableconfiguration": {
+    "name": "DeleteBucketMetadataTableConfiguration",
+    "description": "Grants permission to delete the S3 Metadata configuration for a specified bucket",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "deletebucketpolicy": {
     "name": "DeleteBucketPolicy",
     "description": "Grants permission to delete the policy on a specified bucket",
@@ -1285,6 +1334,28 @@
     ],
     "dependentActions": []
   },
+  "getbucketmetadatatableconfiguration": {
+    "name": "GetBucketMetadataTableConfiguration",
+    "description": "Grants permission to return the S3 Metadata configuration for a specified bucket",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "bucket",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3:authType",
+      "s3:ResourceAccount",
+      "s3:signatureAge",
+      "s3:signatureversion",
+      "s3:TlsVersion",
+      "s3:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "getbucketnotification": {
     "name": "GetBucketNotification",
     "description": "Grants permission to get the notification configuration of an Amazon S3 bucket",