@cloud-copilot/iam-data 0.9.202411261 → 0.9.202412101

package/data/actions/sagemaker.json

@@ -85,6 +85,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cluster-scheduler-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code-repository",
         "required": false,
@@ -97,6 +103,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "compute-quota",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "context",
         "required": false,
@@ -319,6 +331,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "reserved-capacity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "space",
         "required": false,
@@ -337,6 +355,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "training-plan",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "transform-job",
         "required": false,
@@ -473,6 +497,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callpartnerappapi": {
+    "name": "CallPartnerAppApi",
+    "description": "Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "partner-app",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createaction": {
     "name": "CreateAction",
     "description": "Grants permission to create an action",
@@ -649,6 +688,48 @@
           "iam:PassRole",
           "sagemaker:AddTags"
         ]
+      },
+      {
+        "name": "reserved-capacity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "training-plan",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createclusterschedulerconfig": {
+    "name": "CreateClusterSchedulerConfig",
+    "description": "Grants permission to create a cluster scheduler config",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "eks:AssociateAccessPolicy",
+          "eks:DescribeCluster",
+          "eks:ListAssociatedAccessPolicies",
+          "sagemaker:AddTags",
+          "sagemaker:DescribeCluster"
+        ]
+      },
+      {
+        "name": "cluster-scheduler-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -698,6 +779,36 @@
     ],
     "dependentActions": []
   },
+  "createcomputequota": {
+    "name": "CreateComputeQuota",
+    "description": "Grants permission to create a compute quota",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "eks:AssociateAccessPolicy",
+          "eks:DescribeCluster",
+          "eks:ListAssociatedAccessPolicies",
+          "sagemaker:AddTags",
+          "sagemaker:DescribeCluster"
+        ]
+      },
+      {
+        "name": "compute-quota",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createcontext": {
     "name": "CreateContext",
     "description": "Grants permission to create a context",
@@ -1683,6 +1794,27 @@
     ],
     "dependentActions": []
   },
+  "createreservedcapacity": {
+    "name": "CreateReservedCapacity",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create a reserved capacity",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "reserved-capacity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "sagemaker:AddTags"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createsharedmodel": {
     "name": "CreateSharedModel",
     "isPermissionOnly": true,
@@ -1757,6 +1889,18 @@
           "iam:PassRole",
           "sagemaker:AddTags"
         ]
+      },
+      {
+        "name": "reserved-capacity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "training-plan",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1779,6 +1923,27 @@
     ],
     "dependentActions": []
   },
+  "createtrainingplan": {
+    "name": "CreateTrainingPlan",
+    "description": "Grants permission to create a training plan that allocates resources for scheduling workloads within a specified time range",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "training-plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "sagemaker:AddTags",
+          "sagemaker:CreateReservedCapacity"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
   "createtransformjob": {
     "name": "CreateTransformJob",
     "description": "Grants permission to start a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify",
@@ -2049,6 +2214,21 @@
       "eks:DeleteAccessEntry"
     ]
   },
+  "deleteclusterschedulerconfig": {
+    "name": "DeleteClusterSchedulerConfig",
+    "description": "Grants permission to delete a cluster scheduler config",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-scheduler-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecoderepository": {
     "name": "DeleteCodeRepository",
     "description": "Grants permission to delete a CodeRepository",
@@ -2079,6 +2259,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletecomputequota": {
+    "name": "DeleteComputeQuota",
+    "description": "Grants permission to delete a compute quota",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "compute-quota",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletecontext": {
     "name": "DeleteContext",
     "description": "Grants permission to delete a context",
@@ -2760,6 +2955,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cluster-scheduler-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code-repository",
         "required": false,
@@ -2772,6 +2973,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "compute-quota",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "context",
         "required": false,
@@ -2994,6 +3201,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "reserved-capacity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "space",
         "required": false,
@@ -3012,6 +3225,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "training-plan",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "transform-job",
         "required": false,
@@ -3282,6 +3501,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeclusterschedulerconfig": {
+    "name": "DescribeClusterSchedulerConfig",
+    "description": "Grants permission to get information about a cluster scheduler config",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster-scheduler-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecoderepository": {
     "name": "DescribeCodeRepository",
     "description": "Grants permission to describe a CodeRepository",
@@ -3312,6 +3546,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describecomputequota": {
+    "name": "DescribeComputeQuota",
+    "description": "Grants permission to get information about a compute quota",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "compute-quota",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describecontext": {
     "name": "DescribeContext",
     "description": "Grants permission to get information about a context",
@@ -4047,6 +4296,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describetrainingplan": {
+    "name": "DescribeTrainingPlan",
+    "description": "Grants permission to return information about a specified training plan",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "training-plan",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describetransformjob": {
     "name": "DescribeTransformJob",
     "description": "Grants permission to return information about a transform job",
@@ -4488,6 +4752,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listclusterschedulerconfigs": {
+    "name": "ListClusterSchedulerConfigs",
+    "description": "Grants permission to list cluster scheduler configs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listclusters": {
     "name": "ListClusters",
     "description": "Grants permission to list SageMaker HyperPod clusters",
@@ -4512,6 +4784,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcomputequotas": {
+    "name": "ListComputeQuotas",
+    "description": "Grants permission to list compute quotas",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcontexts": {
     "name": "ListContexts",
     "description": "Grants permission to list contexts",
@@ -5125,6 +5405,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "cluster-scheduler-config",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "code-repository",
         "required": false,
@@ -5137,6 +5423,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "compute-quota",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "context",
         "required": false,
@@ -5359,6 +5651,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "reserved-capacity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "space",
         "required": false,
@@ -5377,6 +5675,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "training-plan",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "transform-job",
         "required": false,
@@ -5422,6 +5726,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listtrainingplans": {
+    "name": "ListTrainingPlans",
+    "description": "Grants permission to list all the training plans that have been created in a specified account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listtransformjobs": {
     "name": "ListTransformJobs",
     "description": "Grants permission to list transform jobs",
@@ -5578,6 +5890,14 @@
     ],
     "dependentActions": []
   },
+  "searchtrainingplanofferings": {
+    "name": "SearchTrainingPlanOfferings",
+    "description": "Grants permissions to search for the available training plan offerings that best match specified capacity requirements",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sendheartbeat": {
     "name": "SendHeartbeat",
     "description": "Grants permission to publish heartbeat data from devices. After you deploy a model onto edge devices this api is used to report device status",
@@ -6053,19 +6373,46 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
+        "dependentActions": [
+          "eks:AssociateAccessPolicy",
+          "eks:CreateAccessEntry",
+          "eks:DeleteAccessEntry",
+          "eks:DescribeAccessEntry",
+          "eks:DescribeCluster",
+          "iam:PassRole",
+          "sagemaker:BatchDeleteClusterNodes"
+        ]
+      },
+      {
+        "name": "reserved-capacity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "training-plan",
+        "required": false,
+        "conditionKeys": [],
         "dependentActions": []
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "eks:AssociateAccessPolicy",
-      "eks:CreateAccessEntry",
-      "eks:DeleteAccessEntry",
-      "eks:DescribeAccessEntry",
-      "eks:DescribeCluster",
-      "iam:PassRole",
-      "sagemaker:BatchDeleteClusterNodes"
-    ]
+    "dependentActions": []
+  },
+  "updateclusterschedulerconfig": {
+    "name": "UpdateClusterSchedulerConfig",
+    "description": "Grants permission to update a cluster scheduler config",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster-scheduler-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
   },
   "updateclustersoftware": {
     "name": "UpdateClusterSoftware",
@@ -6099,6 +6446,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatecomputequota": {
+    "name": "UpdateComputeQuota",
+    "description": "Grants permission to update a compute quota",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "compute-quota",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatecontext": {
     "name": "UpdateContext",
     "description": "Grants permission to update a context",