@cloud-copilot/iam-data 0.9.202503291 → 0.9.202504081

package/data/actions/codebuild.json

@@ -44,6 +44,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchgetcommandexecutions": {
+    "name": "BatchGetCommandExecutions",
+    "description": "Grants permission to get information about one or more command executions",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "sandbox",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchgetfleets": {
     "name": "BatchGetFleets",
     "description": "Grants permission to return an array of the Fleet objects specified by the input parameter",
@@ -104,6 +119,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "batchgetsandboxes": {
+    "name": "BatchGetSandboxes",
+    "description": "Grants permission to get information about one or more sandboxes",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "batchputcodecoverages": {
     "name": "BatchPutCodeCoverages",
     "isPermissionOnly": true,
@@ -484,6 +514,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listcommandexecutionsforsandbox": {
+    "name": "ListCommandExecutionsForSandbox",
+    "description": "Grants permission to get a list of command execution IDs for the specified sandbox, with each command execution ID representing a single command execution",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "sandbox",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listconnectedoauthaccounts": {
     "name": "ListConnectedOAuthAccounts",
     "isPermissionOnly": true,
@@ -557,6 +602,29 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listsandboxes": {
+    "name": "ListSandboxes",
+    "description": "Grants permission to get a list of sandbox IDs, with each sandbox ID representing a single sandbox",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsandboxesforproject": {
+    "name": "ListSandboxesForProject",
+    "description": "Grants permission to get a list of sandbox IDs for the specified sandbox project, with each sandbox ID representing a single sandbox",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsharedprojects": {
     "name": "ListSharedProjects",
     "description": "Grants permission to return a list of project ARNs that have been shared with the requester. Each project ARN represents one project",
@@ -671,6 +739,51 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startcommandexecution": {
+    "name": "StartCommandExecution",
+    "description": "Grants permission to start running a command execution",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sandbox",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startsandbox": {
+    "name": "StartSandbox",
+    "description": "Grants permission to start running a sandbox",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "startsandboxconnection": {
+    "name": "StartSandboxConnection",
+    "description": "Grants permission to establish a connection to the sandbox",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "sandbox",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopbuild": {
     "name": "StopBuild",
     "description": "Grants permission to attempt to stop running a build",
@@ -701,6 +814,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopsandbox": {
+    "name": "StopSandbox",
+    "description": "Grants permission to attempt to stop running a sandbox",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "project",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updatefleet": {
     "name": "UpdateFleet",
     "description": "Grants permission to change the settings of an existing compute fleet",

package/data/actions/s3express.json

@@ -1,4 +1,29 @@
 {
+  "createaccesspoint": {
+    "name": "CreateAccessPoint",
+    "description": "Grants permission to create a new access point",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:LocationName",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "createbucket": {
     "name": "CreateBucket",
     "description": "Grants permission to create a new bucket",
@@ -42,7 +67,80 @@
       "s3express:TlsVersion",
       "s3express:x-amz-content-sha256",
       "s3express:x-amz-server-side-encryption",
-      "s3express:x-amz-server-side-encryption-aws-kms-key-id"
+      "s3express:x-amz-server-side-encryption-aws-kms-key-id",
+      "s3express:AllAccessRestrictedToLocalZoneGroup"
+    ],
+    "dependentActions": []
+  },
+  "deleteaccesspoint": {
+    "name": "DeleteAccessPoint",
+    "description": "Grants permission to delete the access point named in the URI",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "deleteaccesspointpolicy": {
+    "name": "DeleteAccessPointPolicy",
+    "description": "Grants permission to delete the policy on a specified access point",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "deleteaccesspointscope": {
+    "name": "DeleteAccessPointScope",
+    "description": "Grants permission to delete the scope configuration on a specified access point",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
     ],
     "dependentActions": []
   },
@@ -88,6 +186,71 @@
     ],
     "dependentActions": []
   },
+  "getaccesspoint": {
+    "name": "GetAccessPoint",
+    "description": "Grants permission to return configuration information about the specified access point",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "getaccesspointpolicy": {
+    "name": "GetAccessPointPolicy",
+    "description": "Grants permission to return the access point policy associated with the specified access point",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "getaccesspointscope": {
+    "name": "GetAccessPointScope",
+    "description": "Grants permission to return the scope configuration associated with the specified access point",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "getbucketpolicy": {
     "name": "GetBucketPolicy",
     "description": "Grants permission to return the policy of the specified bucket",
@@ -151,6 +314,20 @@
     ],
     "dependentActions": []
   },
+  "listaccesspointsfordirectorybuckets": {
+    "name": "ListAccessPointsForDirectoryBuckets",
+    "description": "Grants permission to list access points",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "listallmydirectorybuckets": {
     "name": "ListAllMyDirectoryBuckets",
     "description": "Grants permission to list all directory buckets owned by the authenticated sender of the request",
@@ -165,6 +342,54 @@
     ],
     "dependentActions": []
   },
+  "putaccesspointpolicy": {
+    "name": "PutAccessPointPolicy",
+    "description": "Grants permission to associate an access policy with a specified access point",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
+  "putaccesspointscope": {
+    "name": "PutAccessPointScope",
+    "description": "Grants permission to associate an access point with a specified access point scope configuration",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "accesspoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "s3express:DataAccessPointAccount",
+      "s3express:DataAccessPointArn",
+      "s3express:AccessPointNetworkOrigin",
+      "s3express:authType",
+      "s3express:ResourceAccount",
+      "s3express:signatureversion",
+      "s3express:TlsVersion",
+      "s3express:x-amz-content-sha256"
+    ],
+    "dependentActions": []
+  },
   "putbucketpolicy": {
     "name": "PutBucketPolicy",
     "description": "Grants permission to add or replace a bucket policy on a bucket",

package/data/actions/user-subscriptions.json

@@ -4,7 +4,9 @@
     "description": "Grants permission to create a User subscription Claim",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "user-subscriptions:CreateForSelf"
+    ],
     "dependentActions": []
   },
   "deleteclaim": {

package/data/conditionKeys/s3express.json

@@ -1,14 +1,34 @@
 {
+  "s3express:accesspointnetworkorigin": {
+    "key": "s3express:AccessPointNetworkOrigin",
+    "description": "Filters access by the network origin (Internet or VPC)",
+    "type": "String"
+  },
   "s3express:allaccessrestrictedtolocalzonegroup": {
     "key": "s3express:AllAccessRestrictedToLocalZoneGroup",
-    "description": "Filters all access to the bucket unless the request originates from the AWS Local Zone network border group(s) provided in this condition key",
+    "description": "Filters access by AWS Local Zone network border group(s) provided in this condition key",
+    "type": "String"
+  },
+  "s3express:dataaccesspointaccount": {
+    "key": "s3express:DataAccessPointAccount",
+    "description": "Filters access by the AWS Account ID that owns the access point",
     "type": "String"
   },
+  "s3express:dataaccesspointarn": {
+    "key": "s3express:DataAccessPointArn",
+    "description": "Filters access by an access point Amazon Resource Name (ARN)",
+    "type": "ARN"
+  },
   "s3express:locationname": {
     "key": "s3express:LocationName",
     "description": "Filters access by a specific Availability Zone ID",
     "type": "String"
   },
+  "s3express:permissions": {
+    "key": "s3express:Permissions",
+    "description": "Filters access by the permission requested by Access Point Scope configuration, such as GetObject, PutObject",
+    "type": "ArrayOfString"
+  },
   "s3express:resourceaccount": {
     "key": "s3express:ResourceAccount",
     "description": "Filters access by the resource owner AWS account ID",

package/data/conditionKeys/user-subscriptions.json

@@ -1 +1,7 @@
-{}
+{
+  "user-subscriptions:createforself": {
+    "key": "user-subscriptions:CreateForSelf",
+    "description": "Filters access by only allowing creation of User subscription Claims for the caller",
+    "type": "Bool"
+  }
+}

package/data/resourceTypes/codebuild.json

@@ -28,5 +28,9 @@
   "fleet": {
     "key": "fleet",
     "arn": "arn:${Partition}:codebuild:${Region}:${Account}:fleet/${FleetName}:${FleetId}"
+  },
+  "sandbox": {
+    "key": "sandbox",
+    "arn": "arn:${Partition}:codebuild:${Region}:${Account}:sandbox/${SandboxId}"
   }
 }

package/data/resourceTypes/s3express.json

@@ -2,5 +2,9 @@
   "bucket": {
     "key": "bucket",
     "arn": "arn:${Partition}:s3express:${Region}:${Account}:bucket/${BucketName}"
+  },
+  "accesspoint": {
+    "key": "accesspoint",
+    "arn": "arn:${Partition}:s3express:${Region}:${Account}:accesspoint/${AccessPointName}"
   }
 }

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.9.202503291",
+  "version": "0.9.202504081",
   "description": "AWS IAM Data",
   "repository": "github:cloud-copilot/iam-data",
-  "updatedAt": "2025-03-29T04:47:18.930Z",
+  "updatedAt": "2025-04-08T04:46:36.810Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",