@cloud-copilot/iam-data 0.9.202411261 → 0.9.202412071

package/data/actions/logs.json

@@ -233,6 +233,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteintegration": {
+    "name": "DeleteIntegration",
+    "description": "Grants permission to delete the integration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteloganomalydetector": {
     "name": "DeleteLogAnomalyDetector",
     "description": "Grants permission to delete a log anomaly detector",
@@ -617,6 +625,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getintegration": {
+    "name": "GetIntegration",
+    "description": "Grants permission to retrieve a single integration",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getloganomalydetector": {
     "name": "GetLogAnomalyDetector",
     "description": "Grants permission to get a log anomaly detector",
@@ -749,6 +765,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listintegrations": {
+    "name": "ListIntegrations",
+    "description": "Grants permission to list all integrations associated with the AWS account making the request",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listloganomalydetectors": {
     "name": "ListLogAnomalyDetectors",
     "description": "Grants permission to return all the anomaly detectors that are associated with the AWS account making the request",
@@ -969,6 +993,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "putintegration": {
+    "name": "PutIntegration",
+    "description": "Grants permission to create integration between cloudwatch logs and opensearch",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "putlogevents": {
     "name": "PutLogEvents",
     "description": "Grants permission to upload a batch of log events to the specified log stream",

package/data/actions/memorydb.json

@@ -122,6 +122,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -137,6 +143,28 @@
     ],
     "dependentActions": []
   },
+  "createmultiregioncluster": {
+    "name": "CreateMultiRegionCluster",
+    "description": "Grants permissions to create a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregionparametergroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "memorydb:TagResource"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "memorydb:TLSEnabled"
+    ],
+    "dependentActions": []
+  },
   "createparametergroup": {
     "name": "CreateParameterGroup",
     "description": "Grants permissions to create a new parameter group",
@@ -235,6 +263,12 @@
           "ec2:DescribeVpcs"
         ]
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -247,6 +281,23 @@
     ],
     "dependentActions": []
   },
+  "deletemultiregioncluster": {
+    "name": "DeleteMultiRegionCluster",
+    "description": "Grants permissions to delete a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteparametergroup": {
     "name": "DeleteParameterGroup",
     "description": "Grants permissions to delete a parameter group",
@@ -371,6 +422,53 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemultiregionclusters": {
+    "name": "DescribeMultiRegionClusters",
+    "description": "Grants permissions to retrieve information about all Multi-Region clusters if no cluster identifier is specified, or about a specific Multi-Region cluster if a cluster identifier is supplied",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describemultiregionparametergroups": {
+    "name": "DescribeMultiRegionParameterGroups",
+    "description": "Grants permissions to retrieve information about Multi-Region parameter groups",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregionparametergroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describemultiregionparameters": {
+    "name": "DescribeMultiRegionParameters",
+    "description": "Grants permissions to retrieve a detailed parameter list for a particular Multi-Region parameter group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregionparametergroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeparametergroups": {
     "name": "DescribeParameterGroups",
     "description": "Grants permissions to retrieve information about parameter groups",
@@ -512,6 +610,23 @@
     ],
     "dependentActions": []
   },
+  "listallowedmultiregionclusterupdates": {
+    "name": "ListAllowedMultiRegionClusterUpdates",
+    "description": "Grants permissions to list available Multi-Region cluster updates",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listallowednodetypeupdates": {
     "name": "ListAllowedNodeTypeUpdates",
     "description": "Grants permissions to list available node type updates",
@@ -546,6 +661,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -631,6 +752,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -686,6 +813,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -775,6 +908,35 @@
     ],
     "dependentActions": []
   },
+  "updatemultiregioncluster": {
+    "name": "UpdateMultiRegionCluster",
+    "description": "Grants permissions to update the settings for a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:CreateNetworkInterface",
+          "ec2:DeleteNetworkInterface",
+          "ec2:DescribeNetworkInterfaces",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeVpcs"
+        ]
+      },
+      {
+        "name": "multiregionparametergroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updateparametergroup": {
     "name": "UpdateParameterGroup",
     "description": "Grants permissions to update parameters in a parameter group",

package/data/actions/networkflowmonitor.json

@@ -0,0 +1,393 @@
+{
+  "createmonitor": {
+    "name": "CreateMonitor",
+    "description": "Grants permission to create a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createscope": {
+    "name": "CreateScope",
+    "description": "Grants permission to create a scope",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletemonitor": {
+    "name": "DeleteMonitor",
+    "description": "Grants permission to delete a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletescope": {
+    "name": "DeleteScope",
+    "description": "Grants permission to delete a scope",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmonitor": {
+    "name": "GetMonitor",
+    "description": "Grants permission to get information about a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getqueryresultsmonitortopcontributors": {
+    "name": "GetQueryResultsMonitorTopContributors",
+    "description": "Grants permission to get the results of a query that retrieves top contributors data for a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getqueryresultsworkloadinsightstopcontributors": {
+    "name": "GetQueryResultsWorkloadInsightsTopContributors",
+    "description": "Grants permission to get the results of a query that retrieves top contributors for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getqueryresultsworkloadinsightstopcontributorsdata": {
+    "name": "GetQueryResultsWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to get the results of a query that retrieves top contributors data points for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquerystatusmonitortopcontributors": {
+    "name": "GetQueryStatusMonitorTopContributors",
+    "description": "Grants permission to get the status of a query that retrieves top contributors data for a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquerystatusworkloadinsightstopcontributors": {
+    "name": "GetQueryStatusWorkloadInsightsTopContributors",
+    "description": "Grants permission to get the status of a query that retrieves top contributors for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquerystatusworkloadinsightstopcontributorsdata": {
+    "name": "GetQueryStatusWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to get the status of a query that retrieves top contributors data points for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getscope": {
+    "name": "GetScope",
+    "description": "Grants permission to get information about a scope",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmonitors": {
+    "name": "ListMonitors",
+    "description": "Grants permission to list all monitors in an account and their statuses",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listscopes": {
+    "name": "ListScopes",
+    "description": "Grants permission to get all scopes for an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scope",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "publish": {
+    "name": "Publish",
+    "description": "Grants permission to publish a report",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startquerymonitortopcontributors": {
+    "name": "StartQueryMonitorTopContributors",
+    "description": "Grants permission to start a query for retrieving top contributors data for a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startqueryworkloadinsightstopcontributors": {
+    "name": "StartQueryWorkloadInsightsTopContributors",
+    "description": "Grants permission to start a query for retrieving top contributors data for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startqueryworkloadinsightstopcontributorsdata": {
+    "name": "StartQueryWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to start a query for retrieving top contributors data points for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopquerymonitortopcontributors": {
+    "name": "StopQueryMonitorTopContributors",
+    "description": "Grants permission to stop a query for retrieving top contributors data for a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopqueryworkloadinsightstopcontributors": {
+    "name": "StopQueryWorkloadInsightsTopContributors",
+    "description": "Grants permission to stop a query for retrieving top contributors for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopqueryworkloadinsightstopcontributorsdata": {
+    "name": "StopQueryWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to stop a query for retrieving top contributors data points for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scope",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scope",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatemonitor": {
+    "name": "UpdateMonitor",
+    "description": "Grants permission to update a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatescope": {
+    "name": "UpdateScope",
+    "description": "Grants permission to update a scope",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}