@cloud-copilot/iam-data 0.9.202411261 → 0.9.202412101

package/data/actions/memorydb.json

@@ -122,6 +122,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -137,6 +143,28 @@
     ],
     "dependentActions": []
   },
+  "createmultiregioncluster": {
+    "name": "CreateMultiRegionCluster",
+    "description": "Grants permissions to create a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregionparametergroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "memorydb:TagResource"
+        ]
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys",
+      "memorydb:TLSEnabled"
+    ],
+    "dependentActions": []
+  },
   "createparametergroup": {
     "name": "CreateParameterGroup",
     "description": "Grants permissions to create a new parameter group",
@@ -235,6 +263,12 @@
           "ec2:DescribeVpcs"
         ]
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "snapshot",
         "required": false,
@@ -247,6 +281,23 @@
     ],
     "dependentActions": []
   },
+  "deletemultiregioncluster": {
+    "name": "DeleteMultiRegionCluster",
+    "description": "Grants permissions to delete a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "deleteparametergroup": {
     "name": "DeleteParameterGroup",
     "description": "Grants permissions to delete a parameter group",
@@ -371,6 +422,53 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemultiregionclusters": {
+    "name": "DescribeMultiRegionClusters",
+    "description": "Grants permissions to retrieve information about all Multi-Region clusters if no cluster identifier is specified, or about a specific Multi-Region cluster if a cluster identifier is supplied",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "describemultiregionparametergroups": {
+    "name": "DescribeMultiRegionParameterGroups",
+    "description": "Grants permissions to retrieve information about Multi-Region parameter groups",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregionparametergroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describemultiregionparameters": {
+    "name": "DescribeMultiRegionParameters",
+    "description": "Grants permissions to retrieve a detailed parameter list for a particular Multi-Region parameter group",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregionparametergroup",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeparametergroups": {
     "name": "DescribeParameterGroups",
     "description": "Grants permissions to retrieve information about parameter groups",
@@ -512,6 +610,23 @@
     ],
     "dependentActions": []
   },
+  "listallowedmultiregionclusterupdates": {
+    "name": "ListAllowedMultiRegionClusterUpdates",
+    "description": "Grants permissions to list available Multi-Region cluster updates",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "listallowednodetypeupdates": {
     "name": "ListAllowedNodeTypeUpdates",
     "description": "Grants permissions to list available node type updates",
@@ -546,6 +661,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -631,6 +752,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -686,6 +813,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "multiregioncluster",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "parametergroup",
         "required": false,
@@ -775,6 +908,35 @@
     ],
     "dependentActions": []
   },
+  "updatemultiregioncluster": {
+    "name": "UpdateMultiRegionCluster",
+    "description": "Grants permissions to update the settings for a Multi-Region cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "multiregioncluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": [
+          "ec2:CreateNetworkInterface",
+          "ec2:DeleteNetworkInterface",
+          "ec2:DescribeNetworkInterfaces",
+          "ec2:DescribeSubnets",
+          "ec2:DescribeVpcs"
+        ]
+      },
+      {
+        "name": "multiregionparametergroup",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
   "updateparametergroup": {
     "name": "UpdateParameterGroup",
     "description": "Grants permissions to update parameters in a parameter group",

package/data/actions/networkflowmonitor.json

@@ -0,0 +1,393 @@
+{
+  "createmonitor": {
+    "name": "CreateMonitor",
+    "description": "Grants permission to create a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createscope": {
+    "name": "CreateScope",
+    "description": "Grants permission to create a scope",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "deletemonitor": {
+    "name": "DeleteMonitor",
+    "description": "Grants permission to delete a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletescope": {
+    "name": "DeleteScope",
+    "description": "Grants permission to delete a scope",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getmonitor": {
+    "name": "GetMonitor",
+    "description": "Grants permission to get information about a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getqueryresultsmonitortopcontributors": {
+    "name": "GetQueryResultsMonitorTopContributors",
+    "description": "Grants permission to get the results of a query that retrieves top contributors data for a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getqueryresultsworkloadinsightstopcontributors": {
+    "name": "GetQueryResultsWorkloadInsightsTopContributors",
+    "description": "Grants permission to get the results of a query that retrieves top contributors for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getqueryresultsworkloadinsightstopcontributorsdata": {
+    "name": "GetQueryResultsWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to get the results of a query that retrieves top contributors data points for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquerystatusmonitortopcontributors": {
+    "name": "GetQueryStatusMonitorTopContributors",
+    "description": "Grants permission to get the status of a query that retrieves top contributors data for a monitor",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquerystatusworkloadinsightstopcontributors": {
+    "name": "GetQueryStatusWorkloadInsightsTopContributors",
+    "description": "Grants permission to get the status of a query that retrieves top contributors for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getquerystatusworkloadinsightstopcontributorsdata": {
+    "name": "GetQueryStatusWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to get the status of a query that retrieves top contributors data points for workload insights",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getscope": {
+    "name": "GetScope",
+    "description": "Grants permission to get information about a scope",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listmonitors": {
+    "name": "ListMonitors",
+    "description": "Grants permission to list all monitors in an account and their statuses",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listscopes": {
+    "name": "ListScopes",
+    "description": "Grants permission to get all scopes for an account",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list the tags for a resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scope",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "publish": {
+    "name": "Publish",
+    "description": "Grants permission to publish a report",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startquerymonitortopcontributors": {
+    "name": "StartQueryMonitorTopContributors",
+    "description": "Grants permission to start a query for retrieving top contributors data for a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startqueryworkloadinsightstopcontributors": {
+    "name": "StartQueryWorkloadInsightsTopContributors",
+    "description": "Grants permission to start a query for retrieving top contributors data for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startqueryworkloadinsightstopcontributorsdata": {
+    "name": "StartQueryWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to start a query for retrieving top contributors data points for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopquerymonitortopcontributors": {
+    "name": "StopQueryMonitorTopContributors",
+    "description": "Grants permission to stop a query for retrieving top contributors data for a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopqueryworkloadinsightstopcontributors": {
+    "name": "StopQueryWorkloadInsightsTopContributors",
+    "description": "Grants permission to stop a query for retrieving top contributors for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stopqueryworkloadinsightstopcontributorsdata": {
+    "name": "StopQueryWorkloadInsightsTopContributorsData",
+    "description": "Grants permission to stop a query for retrieving top contributors data points for workload insights",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to add tags to a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scope",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to remove tags from a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "scope",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "updatemonitor": {
+    "name": "UpdateMonitor",
+    "description": "Grants permission to update a monitor",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "monitor",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatescope": {
+    "name": "UpdateScope",
+    "description": "Grants permission to update a scope",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "scope",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/observabilityadmin.json

@@ -0,0 +1,66 @@
+{
+  "gettelemetryevaluationstatus": {
+    "name": "GetTelemetryEvaluationStatus",
+    "description": "Grants permission to retrieve the Telemetry Config feature status for the account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "gettelemetryevaluationstatusfororganization": {
+    "name": "GetTelemetryEvaluationStatusForOrganization",
+    "description": "Grants permission to retrieve the Telemetry Config feature status for the organization",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresourcetelemetry": {
+    "name": "ListResourceTelemetry",
+    "description": "Grants permission to retrieve telemetry configurations for resources associated with the account",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listresourcetelemetryfororganization": {
+    "name": "ListResourceTelemetryForOrganization",
+    "description": "Grants permission to retrieve telemetry configurations for resources associated with accounts in the organization",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "starttelemetryevaluation": {
+    "name": "StartTelemetryEvaluation",
+    "description": "Grants permission to start the Telemetry Config feature for the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "starttelemetryevaluationfororganization": {
+    "name": "StartTelemetryEvaluationForOrganization",
+    "description": "Grants permission to start the Telemetry Config feature for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stoptelemetryevaluation": {
+    "name": "StopTelemetryEvaluation",
+    "description": "Grants permission to stop the Telemetry Config feature for the account",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "stoptelemetryevaluationfororganization": {
+    "name": "StopTelemetryEvaluationForOrganization",
+    "description": "Grants permission to stop the Telemetry Config feature for the organization",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}