@cloud-copilot/iam-data 0.9.202502081 → 0.9.202502111

package/data/actions/kms.json

@@ -131,6 +131,38 @@
       "kms:EncryptionContext:${EncryptionContextKey}",
       "kms:EncryptionContextKeys",
       "kms:RecipientAttestation:ImageSha384",
+      "kms:RecipientAttestation:PCR0",
+      "kms:RecipientAttestation:PCR1",
+      "kms:RecipientAttestation:PCR2",
+      "kms:RecipientAttestation:PCR3",
+      "kms:RecipientAttestation:PCR4",
+      "kms:RecipientAttestation:PCR5",
+      "kms:RecipientAttestation:PCR6",
+      "kms:RecipientAttestation:PCR7",
+      "kms:RecipientAttestation:PCR8",
+      "kms:RecipientAttestation:PCR9",
+      "kms:RecipientAttestation:PCR10",
+      "kms:RecipientAttestation:PCR11",
+      "kms:RecipientAttestation:PCR12",
+      "kms:RecipientAttestation:PCR13",
+      "kms:RecipientAttestation:PCR14",
+      "kms:RecipientAttestation:PCR15",
+      "kms:RecipientAttestation:PCR16",
+      "kms:RecipientAttestation:PCR17",
+      "kms:RecipientAttestation:PCR18",
+      "kms:RecipientAttestation:PCR19",
+      "kms:RecipientAttestation:PCR20",
+      "kms:RecipientAttestation:PCR21",
+      "kms:RecipientAttestation:PCR22",
+      "kms:RecipientAttestation:PCR23",
+      "kms:RecipientAttestation:PCR24",
+      "kms:RecipientAttestation:PCR25",
+      "kms:RecipientAttestation:PCR26",
+      "kms:RecipientAttestation:PCR27",
+      "kms:RecipientAttestation:PCR28",
+      "kms:RecipientAttestation:PCR29",
+      "kms:RecipientAttestation:PCR30",
+      "kms:RecipientAttestation:PCR31",
       "kms:RequestAlias",
       "kms:ViaService"
     ],
@@ -204,6 +236,38 @@
       "kms:CallerAccount",
       "kms:KeyAgreementAlgorithm",
       "kms:RecipientAttestation:ImageSha384",
+      "kms:RecipientAttestation:PCR0",
+      "kms:RecipientAttestation:PCR1",
+      "kms:RecipientAttestation:PCR2",
+      "kms:RecipientAttestation:PCR3",
+      "kms:RecipientAttestation:PCR4",
+      "kms:RecipientAttestation:PCR5",
+      "kms:RecipientAttestation:PCR6",
+      "kms:RecipientAttestation:PCR7",
+      "kms:RecipientAttestation:PCR8",
+      "kms:RecipientAttestation:PCR9",
+      "kms:RecipientAttestation:PCR10",
+      "kms:RecipientAttestation:PCR11",
+      "kms:RecipientAttestation:PCR12",
+      "kms:RecipientAttestation:PCR13",
+      "kms:RecipientAttestation:PCR14",
+      "kms:RecipientAttestation:PCR15",
+      "kms:RecipientAttestation:PCR16",
+      "kms:RecipientAttestation:PCR17",
+      "kms:RecipientAttestation:PCR18",
+      "kms:RecipientAttestation:PCR19",
+      "kms:RecipientAttestation:PCR20",
+      "kms:RecipientAttestation:PCR21",
+      "kms:RecipientAttestation:PCR22",
+      "kms:RecipientAttestation:PCR23",
+      "kms:RecipientAttestation:PCR24",
+      "kms:RecipientAttestation:PCR25",
+      "kms:RecipientAttestation:PCR26",
+      "kms:RecipientAttestation:PCR27",
+      "kms:RecipientAttestation:PCR28",
+      "kms:RecipientAttestation:PCR29",
+      "kms:RecipientAttestation:PCR30",
+      "kms:RecipientAttestation:PCR31",
       "kms:RequestAlias",
       "kms:ViaService"
     ],
@@ -361,6 +425,38 @@
       "kms:EncryptionContext:${EncryptionContextKey}",
       "kms:EncryptionContextKeys",
       "kms:RecipientAttestation:ImageSha384",
+      "kms:RecipientAttestation:PCR0",
+      "kms:RecipientAttestation:PCR1",
+      "kms:RecipientAttestation:PCR2",
+      "kms:RecipientAttestation:PCR3",
+      "kms:RecipientAttestation:PCR4",
+      "kms:RecipientAttestation:PCR5",
+      "kms:RecipientAttestation:PCR6",
+      "kms:RecipientAttestation:PCR7",
+      "kms:RecipientAttestation:PCR8",
+      "kms:RecipientAttestation:PCR9",
+      "kms:RecipientAttestation:PCR10",
+      "kms:RecipientAttestation:PCR11",
+      "kms:RecipientAttestation:PCR12",
+      "kms:RecipientAttestation:PCR13",
+      "kms:RecipientAttestation:PCR14",
+      "kms:RecipientAttestation:PCR15",
+      "kms:RecipientAttestation:PCR16",
+      "kms:RecipientAttestation:PCR17",
+      "kms:RecipientAttestation:PCR18",
+      "kms:RecipientAttestation:PCR19",
+      "kms:RecipientAttestation:PCR20",
+      "kms:RecipientAttestation:PCR21",
+      "kms:RecipientAttestation:PCR22",
+      "kms:RecipientAttestation:PCR23",
+      "kms:RecipientAttestation:PCR24",
+      "kms:RecipientAttestation:PCR25",
+      "kms:RecipientAttestation:PCR26",
+      "kms:RecipientAttestation:PCR27",
+      "kms:RecipientAttestation:PCR28",
+      "kms:RecipientAttestation:PCR29",
+      "kms:RecipientAttestation:PCR30",
+      "kms:RecipientAttestation:PCR31",
       "kms:RequestAlias",
       "kms:ViaService"
     ],
@@ -384,6 +480,39 @@
       "kms:EncryptionAlgorithm",
       "kms:EncryptionContext:${EncryptionContextKey}",
       "kms:EncryptionContextKeys",
+      "kms:RecipientAttestation:ImageSha384",
+      "kms:RecipientAttestation:PCR0",
+      "kms:RecipientAttestation:PCR1",
+      "kms:RecipientAttestation:PCR2",
+      "kms:RecipientAttestation:PCR3",
+      "kms:RecipientAttestation:PCR4",
+      "kms:RecipientAttestation:PCR5",
+      "kms:RecipientAttestation:PCR6",
+      "kms:RecipientAttestation:PCR7",
+      "kms:RecipientAttestation:PCR8",
+      "kms:RecipientAttestation:PCR9",
+      "kms:RecipientAttestation:PCR10",
+      "kms:RecipientAttestation:PCR11",
+      "kms:RecipientAttestation:PCR12",
+      "kms:RecipientAttestation:PCR13",
+      "kms:RecipientAttestation:PCR14",
+      "kms:RecipientAttestation:PCR15",
+      "kms:RecipientAttestation:PCR16",
+      "kms:RecipientAttestation:PCR17",
+      "kms:RecipientAttestation:PCR18",
+      "kms:RecipientAttestation:PCR19",
+      "kms:RecipientAttestation:PCR20",
+      "kms:RecipientAttestation:PCR21",
+      "kms:RecipientAttestation:PCR22",
+      "kms:RecipientAttestation:PCR23",
+      "kms:RecipientAttestation:PCR24",
+      "kms:RecipientAttestation:PCR25",
+      "kms:RecipientAttestation:PCR26",
+      "kms:RecipientAttestation:PCR27",
+      "kms:RecipientAttestation:PCR28",
+      "kms:RecipientAttestation:PCR29",
+      "kms:RecipientAttestation:PCR30",
+      "kms:RecipientAttestation:PCR31",
       "kms:RequestAlias",
       "kms:ViaService"
     ],
@@ -460,7 +589,39 @@
     "accessLevel": "Write",
     "resourceTypes": [],
     "conditionKeys": [
-      "kms:RecipientAttestation:ImageSha384"
+      "kms:RecipientAttestation:ImageSha384",
+      "kms:RecipientAttestation:PCR0",
+      "kms:RecipientAttestation:PCR1",
+      "kms:RecipientAttestation:PCR2",
+      "kms:RecipientAttestation:PCR3",
+      "kms:RecipientAttestation:PCR4",
+      "kms:RecipientAttestation:PCR5",
+      "kms:RecipientAttestation:PCR6",
+      "kms:RecipientAttestation:PCR7",
+      "kms:RecipientAttestation:PCR8",
+      "kms:RecipientAttestation:PCR9",
+      "kms:RecipientAttestation:PCR10",
+      "kms:RecipientAttestation:PCR11",
+      "kms:RecipientAttestation:PCR12",
+      "kms:RecipientAttestation:PCR13",
+      "kms:RecipientAttestation:PCR14",
+      "kms:RecipientAttestation:PCR15",
+      "kms:RecipientAttestation:PCR16",
+      "kms:RecipientAttestation:PCR17",
+      "kms:RecipientAttestation:PCR18",
+      "kms:RecipientAttestation:PCR19",
+      "kms:RecipientAttestation:PCR20",
+      "kms:RecipientAttestation:PCR21",
+      "kms:RecipientAttestation:PCR22",
+      "kms:RecipientAttestation:PCR23",
+      "kms:RecipientAttestation:PCR24",
+      "kms:RecipientAttestation:PCR25",
+      "kms:RecipientAttestation:PCR26",
+      "kms:RecipientAttestation:PCR27",
+      "kms:RecipientAttestation:PCR28",
+      "kms:RecipientAttestation:PCR29",
+      "kms:RecipientAttestation:PCR30",
+      "kms:RecipientAttestation:PCR31"
     ],
     "dependentActions": []
   },
@@ -757,7 +918,13 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "kms:CallerAccount",
+      "kms:EncryptionContext:${EncryptionContextKey}",
+      "kms:EncryptionContextKeys",
+      "kms:GrantConstraintType",
+      "kms:ViaService"
+    ],
     "dependentActions": []
   },
   "revokegrant": {

package/data/actions/q.json

@@ -1,4 +1,13 @@
 {
+  "associateconnectorresource": {
+    "name": "AssociateConnectorResource",
+    "isPermissionOnly": true,
+    "description": "Grants permission to associate an AWS resource with an Amazon Q connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createassignment": {
     "name": "CreateAssignment",
     "isPermissionOnly": true,
@@ -18,6 +27,24 @@
     ],
     "dependentActions": []
   },
+  "createauthgrant": {
+    "name": "CreateAuthGrant",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create OAuth user in Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createoauthappconnection": {
+    "name": "CreateOAuthAppConnection",
+    "isPermissionOnly": true,
+    "description": "Grants permission to register an OAuth application in Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createplugin": {
     "name": "CreatePlugin",
     "isPermissionOnly": true,
@@ -83,6 +110,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getconnector": {
+    "name": "GetConnector",
+    "isPermissionOnly": true,
+    "description": "Grants permission to view information about a specific Amazon Q connector",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getconversation": {
     "name": "GetConversation",
     "isPermissionOnly": true,
@@ -198,6 +234,24 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "rejectconnector": {
+    "name": "RejectConnector",
+    "isPermissionOnly": true,
+    "description": "Grants permission to reject a connection request for an Amazon Q connector",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sendevent": {
+    "name": "SendEvent",
+    "isPermissionOnly": true,
+    "description": "Grants permission to trigger asynchronous Amazon Q actions",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "sendmessage": {
     "name": "SendMessage",
     "isPermissionOnly": true,
@@ -273,6 +327,24 @@
     ],
     "dependentActions": []
   },
+  "updateauthgrant": {
+    "name": "UpdateAuthGrant",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update OAuth user in Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateoauthappconnection": {
+    "name": "UpdateOAuthAppConnection",
+    "isPermissionOnly": true,
+    "description": "Grants permission to update an OAuth application in Amazon Q",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatetroubleshootingcommandresult": {
     "name": "UpdateTroubleshootingCommandResult",
     "isPermissionOnly": true,

package/data/conditionKeys/kms.json

@@ -131,12 +131,167 @@
   },
   "kms:recipientattestation:imagesha384": {
     "key": "kms:RecipientAttestation:ImageSha384",
-    "description": "Filters access to the Decrypt, DeriveSharedSecret, GenerateDataKey, GenerateDataKeyPair, and GenerateRandom operations based on the image hash in the attestation document in the request",
+    "description": "Filters access to the API operations based on the image hash in the attestation document in the request",
     "type": "String"
   },
-  "kms:recipientattestation:pcr": {
-    "key": "kms:RecipientAttestation:PCR",
-    "description": "Filters access to the Decrypt, GenerateDataKey, and GenerateRandom operations based on the platform configuration registers (PCRs) in the attestation document in the request",
+  "kms:recipientattestation:pcr0": {
+    "key": "kms:RecipientAttestation:PCR0",
+    "description": "Filters access by the platform configuration register (PCR) 0 in the attestation document. PCR0 is a contiguous measure of the contents of the enclave image file, without the section data",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr1": {
+    "key": "kms:RecipientAttestation:PCR1",
+    "description": "Filters access by the platform configuration register (PCR) 1 in the attestation document. PCR1 is a contiguous measurement of the Linux kernel and bootstrap data",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr10": {
+    "key": "kms:RecipientAttestation:PCR10",
+    "description": "Filters access by the platform configuration register (PCR) 10 in the attestation document in the request. PCR10 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr11": {
+    "key": "kms:RecipientAttestation:PCR11",
+    "description": "Filters access by the platform configuration register (PCR) 11 in the attestation document in the request. PCR11 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr12": {
+    "key": "kms:RecipientAttestation:PCR12",
+    "description": "Filters access by the platform configuration register (PCR) 12 in the attestation document in the request. PCR12 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr13": {
+    "key": "kms:RecipientAttestation:PCR13",
+    "description": "Filters access by the platform configuration register (PCR) 13 in the attestation document in the request. PCR13 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr14": {
+    "key": "kms:RecipientAttestation:PCR14",
+    "description": "Filters access by the platform configuration register (PCR) 14 in the attestation document in the request. PCR14 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr15": {
+    "key": "kms:RecipientAttestation:PCR15",
+    "description": "Filters access by the platform configuration register (PCR) 15 in the attestation document in the request. PCR15 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr16": {
+    "key": "kms:RecipientAttestation:PCR16",
+    "description": "Filters access by the platform configuration register (PCR) 16 in the attestation document in the request. PCR16 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr17": {
+    "key": "kms:RecipientAttestation:PCR17",
+    "description": "Filters access by the platform configuration register (PCR) 17 in the attestation document in the request. PCR17 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr18": {
+    "key": "kms:RecipientAttestation:PCR18",
+    "description": "Filters access by the platform configuration register (PCR) 18 in the attestation document in the request. PCR18 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr19": {
+    "key": "kms:RecipientAttestation:PCR19",
+    "description": "Filters access by the platform configuration register (PCR) 19 in the attestation document in the request. PCR19 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr2": {
+    "key": "kms:RecipientAttestation:PCR2",
+    "description": "Filters access by the platform configuration register (PCR) 2 in the attestation document. PCR2 is a contiguous, in-order measurement of the user applications, without the boot ramfs",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr20": {
+    "key": "kms:RecipientAttestation:PCR20",
+    "description": "Filters access by the platform configuration register (PCR) 20 in the attestation document in the request. PCR20 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr21": {
+    "key": "kms:RecipientAttestation:PCR21",
+    "description": "Filters access by the platform configuration register (PCR) 21 in the attestation document in the request. PCR21 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr22": {
+    "key": "kms:RecipientAttestation:PCR22",
+    "description": "Filters access by the platform configuration register (PCR) 22 in the attestation document in the request. PCR22 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr23": {
+    "key": "kms:RecipientAttestation:PCR23",
+    "description": "Filters access by the platform configuration register (PCR) 23 in the attestation document in the request. PCR23 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr24": {
+    "key": "kms:RecipientAttestation:PCR24",
+    "description": "Filters access by the platform configuration register (PCR) 24 in the attestation document in the request. PCR24 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr25": {
+    "key": "kms:RecipientAttestation:PCR25",
+    "description": "Filters access by the platform configuration register (PCR) 25 in the attestation document in the request. PCR25 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr26": {
+    "key": "kms:RecipientAttestation:PCR26",
+    "description": "Filters access by the platform configuration register (PCR) 26 in the attestation document in the request. PCR26 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr27": {
+    "key": "kms:RecipientAttestation:PCR27",
+    "description": "Filters access by the platform configuration register (PCR) 27 in the attestation document in the request. PCR27 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr28": {
+    "key": "kms:RecipientAttestation:PCR28",
+    "description": "Filters access by the platform configuration register (PCR) 28 in the attestation document in the request. PCR28 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr29": {
+    "key": "kms:RecipientAttestation:PCR29",
+    "description": "Filters access by the platform configuration register (PCR) 29 in the attestation document in the request. PCR29 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr3": {
+    "key": "kms:RecipientAttestation:PCR3",
+    "description": "Filters access by the platform configuration register (PCR) 3 in the attestation document. PCR3 is a contiguous measurement of the IAM role assigned to the parent instance",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr30": {
+    "key": "kms:RecipientAttestation:PCR30",
+    "description": "Filters access by the platform configuration register (PCR) 30 in the attestation document in the request. PCR30 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr31": {
+    "key": "kms:RecipientAttestation:PCR31",
+    "description": "Filters access by the platform configuration register (PCR) 31 in the attestation document in the request. PCR31 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr4": {
+    "key": "kms:RecipientAttestation:PCR4",
+    "description": "Filters access by the platform configuration register (PCR) 4 in the attestation document. PCR4 is a contiguous measurement of the ID of the parent instance",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr5": {
+    "key": "kms:RecipientAttestation:PCR5",
+    "description": "Filters access by the platform configuration register (PCR) 5 in the attestation document in the request. PCR5 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr6": {
+    "key": "kms:RecipientAttestation:PCR6",
+    "description": "Filters access by the platform configuration register (PCR) 6 in the attestation document in the request. PCR6 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr7": {
+    "key": "kms:RecipientAttestation:PCR7",
+    "description": "Filters access by platform configuration register (PCR) 7 in the attestation document in the request. PCR7 is a custom PCR that can be defined by the user for specific use cases",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr8": {
+    "key": "kms:RecipientAttestation:PCR8",
+    "description": "Filters access by the platform configuration register (PCR) 8 in the attestation document. PCR8 is a measure of the signing certificate specified for the enclave image file",
+    "type": "String"
+  },
+  "kms:recipientattestation:pcr9": {
+    "key": "kms:RecipientAttestation:PCR9",
+    "description": "Filters access by the platform configuration register (PCR) 9 in the attestation document in the request. PCR9 is a custom PCR that can be defined by the user for specific use cases",
     "type": "String"
   },
   "kms:replicaregion": {

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202502081",
+  "version": "0.9.202502111",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-02-08T04:43:41.005Z",
+  "updatedAt": "2025-02-11T04:43:54.035Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",