@cloud-copilot/iam-data 0.9.202412101 → 0.9.202412121

package/data/actions/cleanrooms.json

@@ -1269,7 +1269,7 @@
     "name": "PassCollaboration",
     "isPermissionOnly": true,
     "description": "Grants permission to access a collaboration in the context of Clean Rooms ML custom models",
-    "accessLevel": "Write",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "collaboration",
@@ -1285,7 +1285,7 @@
     "name": "PassMembership",
     "isPermissionOnly": true,
     "description": "Grants permission to access a membership in the context of Clean Rooms ML custom models",
-    "accessLevel": "Write",
+    "accessLevel": "Read",
     "resourceTypes": [
       {
         "name": "membership",

package/data/actions/cognito-idp.json

@@ -496,6 +496,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "createmanagedloginbranding": {
+    "name": "CreateManagedLoginBranding",
+    "description": "Grants permission to create a branding settings for managed login and associate it with an app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createresourceserver": {
     "name": "CreateResourceServer",
     "description": "Grants permission to create and configure scopes for OAuth 2.0 resource servers",
@@ -598,6 +613,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletemanagedloginbranding": {
+    "name": "DeleteManagedLoginBranding",
+    "description": "Grants permission to delete the managed login branding style for any app client",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteresourceserver": {
     "name": "DeleteResourceServer",
     "description": "Grants permission to delete any OAuth 2.0 resource server from user pools",
@@ -689,6 +719,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describemanagedloginbranding": {
+    "name": "DescribeManagedLoginBranding",
+    "description": "Grants permission to get the detailed information about the branding style of managed login",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describemanagedloginbrandingbyclient": {
+    "name": "DescribeManagedLoginBrandingByClient",
+    "description": "Grants permission to get the detailed information about the branding style of managed login associated with an appclient",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describeresourceserver": {
     "name": "DescribeResourceServer",
     "description": "Grants permission to describe any OAuth 2.0 resource server",
@@ -1343,6 +1403,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatemanagedloginbranding": {
+    "name": "UpdateManagedLoginBranding",
+    "description": "Grants permission to update the branding settings of a managed login",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "userpool",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateresourceserver": {
     "name": "UpdateResourceServer",
     "description": "Grants permission to update the configuration of any OAuth 2.0 resource server",

package/data/actions/mgh.json

@@ -1,4 +1,37 @@
 {
+  "acceptconnection": {
+    "name": "AcceptConnection",
+    "description": "Grants permission to accept a connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "associateautomationunitrole": {
+    "name": "AssociateAutomationUnitRole",
+    "description": "Grants permission to associate an IAM role to an automation unit",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationUnitResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "associatecreatedartifact": {
     "name": "AssociateCreatedArtifact",
     "description": "Grants permission to associate a given AWS artifact to a MigrationTask",
@@ -29,6 +62,67 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "associatesourceresource": {
+    "name": "AssociateSourceResource",
+    "description": "Grants permission to associate source resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "migrationTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchassociateiamrolewithconnection": {
+    "name": "BatchAssociateIamRoleWithConnection",
+    "description": "Grants permission to batch-associate IAM roles with a connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchdisassociateiamrolefromconnection": {
+    "name": "BatchDisassociateIamRoleFromConnection",
+    "description": "Grants permission to batch-disassociate IAM roles from a connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createautomationrun": {
+    "name": "CreateAutomationRun",
+    "description": "Grants permission to create an automation unit run",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createautomationunit": {
+    "name": "CreateAutomationUnit",
+    "description": "Grants permission to create an automation unit",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createhomeregioncontrol": {
     "name": "CreateHomeRegionControl",
     "description": "Grants permission to create a Migration Hub Home Region Control",
@@ -52,6 +146,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteautomationrun": {
+    "name": "DeleteAutomationRun",
+    "description": "Grants permission to delete an automation unit run",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationRunResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteautomationunit": {
+    "name": "DeleteAutomationUnit",
+    "description": "Grants permission to delete an automation unit",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationUnitResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteconnection": {
+    "name": "DeleteConnection",
+    "description": "Grants permission to delete a connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletehomeregioncontrol": {
     "name": "DeleteHomeRegionControl",
     "description": "Grants permission to delete a Migration Hub Home Region Control",
@@ -83,6 +222,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "describeautomationrun": {
+    "name": "DescribeAutomationRun",
+    "description": "Grants permission to describe an automation unit run",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AutomationRunResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeautomationunit": {
+    "name": "DescribeAutomationUnit",
+    "description": "Grants permission to describe an automation unit",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "AutomationUnitResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "describehomeregioncontrols": {
     "name": "DescribeHomeRegionControls",
     "description": "Grants permission to list Home Region Controls",
@@ -106,6 +275,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociateautomationunitrole": {
+    "name": "DisassociateAutomationUnitRole",
+    "description": "Grants permission to disassociate an IAM role from an automation unit",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "AutomationUnitResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "disassociatecreatedartifact": {
     "name": "DisassociateCreatedArtifact",
     "description": "Grants permission to disassociate a given AWS artifact from a MigrationTask",
@@ -136,6 +320,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "disassociatesourceresource": {
+    "name": "DisassociateSourceResource",
+    "description": "Grants permission to diassociate source resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "migrationTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getconnection": {
+    "name": "GetConnection",
+    "description": "Grants permission to get a connection",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gethomeregion": {
     "name": "GetHomeRegion",
     "description": "Grants permission to get the Migration Hub Home Region",
@@ -167,6 +381,45 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listautomationruns": {
+    "name": "ListAutomationRuns",
+    "description": "Grants permission to list automation unit runs",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listautomationunits": {
+    "name": "ListAutomationUnits",
+    "description": "Grants permission to list automation units",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listconnectionroles": {
+    "name": "ListConnectionRoles",
+    "description": "Grants permission to list connection roles",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listconnections": {
+    "name": "ListConnections",
+    "description": "Grants permission to list connections",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listcreatedartifacts": {
     "name": "ListCreatedArtifacts",
     "description": "Grants permission to list associated created artifacts for a MigrationTask",
@@ -197,6 +450,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmigrationtaskupdates": {
+    "name": "ListMigrationTaskUpdates",
+    "description": "Grants permission to list migration tasks updates",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "migrationTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmigrationtasks": {
     "name": "ListMigrationTasks",
     "description": "Grants permission to list MigrationTasks",
@@ -213,6 +481,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsourceresources": {
+    "name": "ListSourceResources",
+    "description": "Grants permission to list source resources",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "migrationTask",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listtagsforresource": {
+    "name": "ListTagsForResource",
+    "description": "Grants permission to list tags for a resource",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "notifyapplicationstate": {
     "name": "NotifyApplicationState",
     "description": "Grants permission to update an Application Discovery Service Application's state",
@@ -250,5 +541,41 @@
     ],
     "conditionKeys": [],
     "dependentActions": []
+  },
+  "rejectconnection": {
+    "name": "RejectConnection",
+    "description": "Grants permission to reject a connection",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "ConnectionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "tagresource": {
+    "name": "TagResource",
+    "description": "Grants permission to tag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys",
+      "aws:RequestTag/${TagKey}"
+    ],
+    "dependentActions": []
+  },
+  "untagresource": {
+    "name": "UntagResource",
+    "description": "Grants permission to untag a resource",
+    "accessLevel": "Tagging",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
   }
 }

package/data/actions/mgn.json

@@ -144,6 +144,14 @@
     ],
     "dependentActions": []
   },
+  "createnetworkmigrationdefinition": {
+    "name": "CreateNetworkMigrationDefinition",
+    "description": "Grants permission to create a network migration definition",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createreplicationconfigurationtemplate": {
     "name": "CreateReplicationConfigurationTemplate",
     "description": "Grants permission to create replication configuration template",
@@ -238,6 +246,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deletenetworkmigrationdefinition": {
+    "name": "DeleteNetworkMigrationDefinition",
+    "description": "Grants permission to delete a network migration definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deletereplicationconfigurationtemplate": {
     "name": "DeleteReplicationConfigurationTemplate",
     "description": "Grants permission to delete replication configuration template",
@@ -556,6 +579,36 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getnetworkmigrationdefinition": {
+    "name": "GetNetworkMigrationDefinition",
+    "description": "Grants permission to get a network migration definition",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getnetworkmigrationmappersegmentconstruct": {
+    "name": "GetNetworkMigrationMapperSegmentConstruct",
+    "description": "Grants permission to get a network migration mapper segment construct",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getreplicationconfiguration": {
     "name": "GetReplicationConfiguration",
     "description": "Grants permission to get replication configuration",
@@ -686,6 +739,179 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listnetworkmigrationanalyses": {
+    "name": "ListNetworkMigrationAnalyses",
+    "description": "Grants permission to list network migration analyses",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationanalysisresults": {
+    "name": "ListNetworkMigrationAnalysisResults",
+    "description": "Grants permission to list network migration analysis results",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationcodegenerationsegments": {
+    "name": "ListNetworkMigrationCodeGenerationSegments",
+    "description": "Grants permission to list network migration code generation segments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationcodegenerations": {
+    "name": "ListNetworkMigrationCodeGenerations",
+    "description": "Grants permission to list network migration code generations",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdefinitions": {
+    "name": "ListNetworkMigrationDefinitions",
+    "description": "Grants permission to list network migration definitions",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdeployedstacks": {
+    "name": "ListNetworkMigrationDeployedStacks",
+    "description": "Grants permission to list network migration deployed stacks",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdeployedstacksdeletions": {
+    "name": "ListNetworkMigrationDeployedStacksDeletions",
+    "description": "Grants permission to list network migration deployed stacks deletions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationdeployments": {
+    "name": "ListNetworkMigrationDeployments",
+    "description": "Grants permission to list network migration deployments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationexecutions": {
+    "name": "ListNetworkMigrationExecutions",
+    "description": "Grants permission to list network migration executions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationmappersegmentconstructs": {
+    "name": "ListNetworkMigrationMapperSegmentConstructs",
+    "description": "Grants permission to list network migration mapper segment constructs",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationmappersegments": {
+    "name": "ListNetworkMigrationMapperSegments",
+    "description": "Grants permission to list network migration mapper segments",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listnetworkmigrationmappings": {
+    "name": "ListNetworkMigrationMappings",
+    "description": "Grants permission to list network migration mappings",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsourceserveractions": {
     "name": "ListSourceServerActions",
     "description": "Grants permission to list source server action documents",
@@ -1140,6 +1366,323 @@
       "s3:PutObject"
     ]
   },
+  "startnetworkmigrationanalysis": {
+    "name": "StartNetworkMigrationAnalysis",
+    "description": "Grants permission to start a network migration analysis",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "directconnect:DescribeConnections",
+      "directconnect:DescribeDirectConnectGatewayAssociations",
+      "directconnect:DescribeDirectConnectGatewayAttachments",
+      "directconnect:DescribeDirectConnectGateways",
+      "directconnect:DescribeVirtualGateways",
+      "directconnect:DescribeVirtualInterfaces",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:CreateNetworkInsightsPath",
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateSecurityGroup",
+      "ec2:CreateTags",
+      "ec2:DeleteNetworkInsightsAnalysis",
+      "ec2:DeleteNetworkInsightsPath",
+      "ec2:DeleteNetworkInterface",
+      "ec2:DeleteSecurityGroup",
+      "ec2:DeleteTags",
+      "ec2:DescribeAvailabilityZones",
+      "ec2:DescribeCustomerGateways",
+      "ec2:DescribeInstances",
+      "ec2:DescribeInternetGateways",
+      "ec2:DescribeManagedPrefixLists",
+      "ec2:DescribeNatGateways",
+      "ec2:DescribeNetworkAcls",
+      "ec2:DescribeNetworkInsightsAnalyses",
+      "ec2:DescribeNetworkInsightsPaths",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribePrefixLists",
+      "ec2:DescribeRegions",
+      "ec2:DescribeRouteTables",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeTransitGatewayAttachments",
+      "ec2:DescribeTransitGatewayConnects",
+      "ec2:DescribeTransitGatewayPeeringAttachments",
+      "ec2:DescribeTransitGatewayRouteTables",
+      "ec2:DescribeTransitGatewayVpcAttachments",
+      "ec2:DescribeTransitGateways",
+      "ec2:DescribeVpcEndpointServiceConfigurations",
+      "ec2:DescribeVpcEndpoints",
+      "ec2:DescribeVpcPeeringConnections",
+      "ec2:DescribeVpcs",
+      "ec2:DescribeVpnConnections",
+      "ec2:DescribeVpnGateways",
+      "ec2:GetManagedPrefixListEntries",
+      "ec2:GetTransitGatewayRouteTablePropagations",
+      "ec2:SearchTransitGatewayRoutes",
+      "ec2:StartNetworkInsightsAnalysis",
+      "elasticloadbalancing:DescribeListeners",
+      "elasticloadbalancing:DescribeLoadBalancerAttributes",
+      "elasticloadbalancing:DescribeLoadBalancers",
+      "elasticloadbalancing:DescribeRules",
+      "elasticloadbalancing:DescribeTags",
+      "elasticloadbalancing:DescribeTargetGroupAttributes",
+      "elasticloadbalancing:DescribeTargetGroups",
+      "elasticloadbalancing:DescribeTargetHealth",
+      "globalaccelerator:ListAccelerators",
+      "globalaccelerator:ListCustomRoutingAccelerators",
+      "globalaccelerator:ListCustomRoutingEndpointGroups",
+      "globalaccelerator:ListCustomRoutingListeners",
+      "globalaccelerator:ListCustomRoutingPortMappings",
+      "globalaccelerator:ListEndpointGroups",
+      "globalaccelerator:ListListeners",
+      "network-firewall:DescribeFirewall",
+      "network-firewall:DescribeFirewallPolicy",
+      "network-firewall:DescribeResourcePolicy",
+      "network-firewall:DescribeRuleGroup",
+      "network-firewall:ListFirewallPolicies",
+      "network-firewall:ListFirewalls",
+      "network-firewall:ListRuleGroups",
+      "tiros:CreateQuery",
+      "tiros:ExtendQuery",
+      "tiros:GetQueryAnswer",
+      "tiros:GetQueryExplanation",
+      "tiros:GetQueryExtensionAccounts"
+    ]
+  },
+  "startnetworkmigrationcodegeneration": {
+    "name": "StartNetworkMigrationCodeGeneration",
+    "description": "Grants permission to start network migration code generation",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startnetworkmigrationdeployedstacksdeletion": {
+    "name": "StartNetworkMigrationDeployedStacksDeletion",
+    "description": "Grants permission to start deletion of network migration deployed stacks",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:AcceptTransitGatewayVpcAttachment",
+      "ec2:AssociateNatGatewayAddress",
+      "ec2:AssociateRouteTable",
+      "ec2:AssociateSubnetCidrBlock",
+      "ec2:AssociateTransitGatewayRouteTable",
+      "ec2:AssociateVpcCidrBlock",
+      "ec2:AttachInternetGateway",
+      "ec2:AttachVolume",
+      "ec2:AuthorizeSecurityGroupEgress",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:DeleteInternetGateway",
+      "ec2:DeleteLaunchTemplate",
+      "ec2:DeleteLaunchTemplateVersions",
+      "ec2:DeleteNatGateway",
+      "ec2:DeleteNetworkAcl",
+      "ec2:DeleteNetworkAclEntry",
+      "ec2:DeleteNetworkInsightsAnalysis",
+      "ec2:DeleteNetworkInsightsPath",
+      "ec2:DeleteNetworkInterface",
+      "ec2:DeleteRoute",
+      "ec2:DeleteRouteTable",
+      "ec2:DeleteSecurityGroup",
+      "ec2:DeleteSnapshot",
+      "ec2:DeleteSubnet",
+      "ec2:DeleteTransitGateway",
+      "ec2:DeleteTransitGatewayRoute",
+      "ec2:DeleteTransitGatewayRouteTable",
+      "ec2:DeleteTransitGatewayVpcAttachment",
+      "ec2:DeleteVolume",
+      "ec2:DeleteVpc",
+      "ec2:DetachInternetGateway",
+      "ec2:DetachVolume",
+      "ec2:DisableTransitGatewayRouteTablePropagation",
+      "ec2:DisassociateNatGatewayAddress",
+      "ec2:DisassociateRouteTable",
+      "ec2:DisassociateTransitGatewayRouteTable",
+      "ec2:EnableTransitGatewayRouteTablePropagation",
+      "ec2:ModifyInstanceAttribute",
+      "ec2:ModifyLaunchTemplate",
+      "ec2:ModifySubnetAttribute",
+      "ec2:ModifyTransitGateway",
+      "ec2:ModifyTransitGatewayVpcAttachment",
+      "ec2:ModifyVolume",
+      "ec2:ModifyVpcAttribute",
+      "ec2:RejectTransitGatewayVpcAttachment",
+      "ec2:ReleaseAddress",
+      "ec2:ReplaceNetworkAclAssociation",
+      "ec2:ReplaceNetworkAclEntry",
+      "ec2:ReplaceRoute",
+      "ec2:ReplaceTransitGatewayRoute",
+      "ec2:RevokeSecurityGroupEgress",
+      "ec2:RevokeSecurityGroupIngress",
+      "ec2:SearchTransitGatewayRoutes"
+    ]
+  },
+  "startnetworkmigrationdeployment": {
+    "name": "StartNetworkMigrationDeployment",
+    "description": "Grants permission to start a network migration deployment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "ec2:AcceptTransitGatewayVpcAttachment",
+      "ec2:AssociateNatGatewayAddress",
+      "ec2:AssociateRouteTable",
+      "ec2:AssociateSubnetCidrBlock",
+      "ec2:AssociateTransitGatewayRouteTable",
+      "ec2:AssociateVpcCidrBlock",
+      "ec2:AttachInternetGateway",
+      "ec2:AttachVolume",
+      "ec2:AuthorizeSecurityGroupEgress",
+      "ec2:AuthorizeSecurityGroupIngress",
+      "ec2:CreateNatGateway",
+      "ec2:CreateNetworkAcl",
+      "ec2:CreateNetworkAclEntry",
+      "ec2:CreateNetworkInsightsPath",
+      "ec2:CreateNetworkInterface",
+      "ec2:CreateRoute",
+      "ec2:CreateRouteTable",
+      "ec2:CreateSecurityGroup",
+      "ec2:CreateSubnet",
+      "ec2:CreateTags",
+      "ec2:CreateTransitGatewayRoute",
+      "ec2:CreateTransitGatewayRouteTable",
+      "ec2:CreateTransitGatewayVpcAttachment",
+      "ec2:DeleteInternetGateway",
+      "ec2:DeleteLaunchTemplate",
+      "ec2:DeleteLaunchTemplateVersions",
+      "ec2:DeleteNatGateway",
+      "ec2:DeleteNetworkAcl",
+      "ec2:DeleteNetworkAclEntry",
+      "ec2:DeleteNetworkInsightsAnalysis",
+      "ec2:DeleteNetworkInsightsPath",
+      "ec2:DeleteNetworkInterface",
+      "ec2:DeleteRoute",
+      "ec2:DeleteRouteTable",
+      "ec2:DeleteSecurityGroup",
+      "ec2:DeleteSnapshot",
+      "ec2:DeleteSubnet",
+      "ec2:DeleteTransitGateway",
+      "ec2:DeleteTransitGatewayRoute",
+      "ec2:DeleteTransitGatewayRouteTable",
+      "ec2:DeleteTransitGatewayVpcAttachment",
+      "ec2:DeleteVolume",
+      "ec2:DeleteVpc",
+      "ec2:DescribeAccountAttributes",
+      "ec2:DescribeAddresses",
+      "ec2:DescribeAvailabilityZones",
+      "ec2:DescribeCustomerGateways",
+      "ec2:DescribeEgressOnlyInternetGateways",
+      "ec2:DescribeHosts",
+      "ec2:DescribeImages",
+      "ec2:DescribeInstanceAttribute",
+      "ec2:DescribeInstanceStatus",
+      "ec2:DescribeInstanceTypes",
+      "ec2:DescribeInstances",
+      "ec2:DescribeInternetGateways",
+      "ec2:DescribeLaunchTemplateVersions",
+      "ec2:DescribeLaunchTemplates",
+      "ec2:DescribeManagedPrefixLists",
+      "ec2:DescribeNatGateways",
+      "ec2:DescribeNetworkAcls",
+      "ec2:DescribeNetworkInsightsAnalyses",
+      "ec2:DescribeNetworkInsightsPaths",
+      "ec2:DescribeNetworkInterfaces",
+      "ec2:DescribePrefixLists",
+      "ec2:DescribeRegions",
+      "ec2:DescribeRouteTables",
+      "ec2:DescribeSecurityGroupRules",
+      "ec2:DescribeSecurityGroups",
+      "ec2:DescribeSnapshots",
+      "ec2:DescribeSubnets",
+      "ec2:DescribeTransitGatewayAttachments",
+      "ec2:DescribeTransitGatewayConnects",
+      "ec2:DescribeTransitGatewayPeeringAttachments",
+      "ec2:DescribeTransitGatewayRouteTables",
+      "ec2:DescribeTransitGatewayVpcAttachments",
+      "ec2:DescribeTransitGateways",
+      "ec2:DescribeVolumes",
+      "ec2:DescribeVpcEndpointServiceConfigurations",
+      "ec2:DescribeVpcEndpoints",
+      "ec2:DescribeVpcPeeringConnections",
+      "ec2:DescribeVpcs",
+      "ec2:DescribeVpnConnections",
+      "ec2:DescribeVpnGateways",
+      "ec2:DetachInternetGateway",
+      "ec2:DetachVolume",
+      "ec2:DisableTransitGatewayRouteTablePropagation",
+      "ec2:DisassociateNatGatewayAddress",
+      "ec2:DisassociateRouteTable",
+      "ec2:DisassociateTransitGatewayRouteTable",
+      "ec2:EnableTransitGatewayRouteTablePropagation",
+      "ec2:GetEbsDefaultKmsKeyId",
+      "ec2:GetEbsEncryptionByDefault",
+      "ec2:GetManagedPrefixListEntries",
+      "ec2:GetTransitGatewayRouteTableAssociations",
+      "ec2:GetTransitGatewayRouteTablePropagations",
+      "ec2:ModifyInstanceAttribute",
+      "ec2:ModifyLaunchTemplate",
+      "ec2:ModifySubnetAttribute",
+      "ec2:ModifyTransitGateway",
+      "ec2:ModifyTransitGatewayVpcAttachment",
+      "ec2:ModifyVolume",
+      "ec2:ModifyVpcAttribute",
+      "ec2:RejectTransitGatewayVpcAttachment",
+      "ec2:ReleaseAddress",
+      "ec2:ReplaceNetworkAclAssociation",
+      "ec2:ReplaceNetworkAclEntry",
+      "ec2:ReplaceRoute",
+      "ec2:ReplaceTransitGatewayRoute",
+      "ec2:RevokeSecurityGroupEgress",
+      "ec2:RevokeSecurityGroupIngress",
+      "ec2:SearchTransitGatewayRoutes",
+      "ec2:StartNetworkInsightsAnalysis"
+    ]
+  },
+  "startnetworkmigrationmapping": {
+    "name": "StartNetworkMigrationMapping",
+    "description": "Grants permission to start a network migration mapping",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "startreplication": {
     "name": "StartReplication",
     "description": "Grants permission to start replication",
@@ -1538,6 +2081,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updatenetworkmigrationdefinition": {
+    "name": "UpdateNetworkMigrationDefinition",
+    "description": "Grants permission to update a network migration definition",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenetworkmigrationmappersegment": {
+    "name": "UpdateNetworkMigrationMapperSegment",
+    "description": "Grants permission to update a network migration mapper segment",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatenetworkmigrationmappersegmentconstruct": {
+    "name": "UpdateNetworkMigrationMapperSegmentConstruct",
+    "description": "Grants permission to update a network migration mapper segment construct",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "NetworkMigrationDefinitionResource",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatereplicationconfiguration": {
     "name": "UpdateReplicationConfiguration",
     "description": "Grants permission to update replication configuration",

package/data/conditionKeys/bcm-pricing-calculator.json

@@ -13,20 +13,5 @@
     "key": "aws:TagKeys",
     "description": "Filters access by the tag keys that are passed in the request",
     "type": "ArrayOfString"
-  },
-  "bcm-pricing-calculator:bill-estimatebillestimateid": {
-    "key": "bcm-pricing-calculator:bill-estimateBillEstimateId",
-    "description": "bill-estimate resource billEstimateId identifier",
-    "type": "String"
-  },
-  "bcm-pricing-calculator:bill-scenariobillscenarioid": {
-    "key": "bcm-pricing-calculator:bill-scenarioBillScenarioId",
-    "description": "bill-scenario resource billScenarioId identifier",
-    "type": "String"
-  },
-  "bcm-pricing-calculator:workload-estimateworkloadestimateid": {
-    "key": "bcm-pricing-calculator:workload-estimateWorkloadEstimateId",
-    "description": "workload-estimate resource workloadEstimateId identifier",
-    "type": "String"
   }
 }

package/data/conditionKeys/mgh.json

@@ -1 +1,32 @@
-{}
+{
+  "aws:requesttag/${tagkey}": {
+    "key": "aws:RequestTag/${TagKey}",
+    "description": "Filters access based on the tags that are passed in the request",
+    "type": "String"
+  },
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access based on the tags associated with the resource",
+    "type": "String"
+  },
+  "aws:tagkeys": {
+    "key": "aws:TagKeys",
+    "description": "Filters access based on the tag keys that are passed in the request",
+    "type": "ArrayOfString"
+  },
+  "mgh:automationrunresourcerunid": {
+    "key": "mgh:AutomationRunResourceRunID",
+    "description": "AutomationRunResource resource runID identifier",
+    "type": "String"
+  },
+  "mgh:automationunitresourceautomationunitarn": {
+    "key": "mgh:AutomationUnitResourceAutomationUnitArn",
+    "description": "AutomationUnitResource resource automationUnitArn identifier",
+    "type": "ARN"
+  },
+  "mgh:connectionresourceconnectionarn": {
+    "key": "mgh:ConnectionResourceConnectionArn",
+    "description": "ConnectionResource resource connectionArn identifier",
+    "type": "String"
+  }
+}

package/data/resourceTypes/bcm-pricing-calculator.json

@@ -1,23 +1,14 @@
 {
   "bill-estimate": {
     "key": "bill-estimate",
-    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-estimate/${BillEstimateId}",
-    "conditionKeys": [
-      "bcm-pricing-calculator:bill-estimateBillEstimateId"
-    ]
+    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-estimate/${BillEstimateId}"
   },
   "bill-scenario": {
     "key": "bill-scenario",
-    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-scenario/${BillScenarioId}",
-    "conditionKeys": [
-      "bcm-pricing-calculator:bill-scenarioBillScenarioId"
-    ]
+    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:bill-scenario/${BillScenarioId}"
   },
   "workload-estimate": {
     "key": "workload-estimate",
-    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:workload-estimate/${WorkloadEstimateId}",
-    "conditionKeys": [
-      "bcm-pricing-calculator:workload-estimateWorkloadEstimateId"
-    ]
+    "arn": "arn:${Partition}:bcm-pricing-calculator:${Region}:${Account}:workload-estimate/${WorkloadEstimateId}"
   }
 }

package/data/resourceTypes/mgh.json

@@ -6,5 +6,27 @@
   "migrationtask": {
     "key": "migrationTask",
     "arn": "arn:${Partition}:mgh:${Region}:${Account}:progressUpdateStream/${Stream}/migrationTask/${Task}"
+  },
+  "automationrunresource": {
+    "key": "AutomationRunResource",
+    "arn": "arn:${Partition}:mgh:${Region}:${Account}:automation-run/${RunID}",
+    "conditionKeys": [
+      "mgh:AutomationRunResourceRunID"
+    ]
+  },
+  "automationunitresource": {
+    "key": "AutomationUnitResource",
+    "arn": "arn:${Partition}:mgh:${Region}:${Account}:automation-unit/${AutomationUnitId}",
+    "conditionKeys": [
+      "mgh:AutomationUnitResourceAutomationUnitArn"
+    ]
+  },
+  "connectionresource": {
+    "key": "ConnectionResource",
+    "arn": "arn:${Partition}:mgh:${Region}:${Account}:${ConnectionArn}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}",
+      "mgh:ConnectionResourceConnectionArn"
+    ]
   }
 }

package/data/resourceTypes/mgn.json

@@ -68,5 +68,12 @@
     "conditionKeys": [
       "aws:ResourceTag/${TagKey}"
     ]
+  },
+  "networkmigrationdefinitionresource": {
+    "key": "NetworkMigrationDefinitionResource",
+    "arn": "arn:${Partition}:mgn:${Region}:${Account}:network-migration-definition/${NetworkMigrationDefinitionID}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202412101",
+  "version": "0.9.202412121",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2024-12-10T04:47:20.347Z",
+  "updatedAt": "2024-12-12T04:48:29.515Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",