@cloud-copilot/iam-data 0.9.202504291 → 0.9.202504301
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/data/actions/dsql.json +15 -0
- package/data/actions/ec2.json +442 -57
- package/data/conditionKeys/ec2.json +10 -0
- package/data/resourceTypes/ec2.json +37 -0
- package/package.json +2 -2
package/data/actions/dsql.json
CHANGED
|
@@ -115,6 +115,21 @@
|
|
|
115
115
|
"conditionKeys": [],
|
|
116
116
|
"dependentActions": []
|
|
117
117
|
},
|
|
118
|
+
"getvpcendpointservicename": {
|
|
119
|
+
"name": "GetVpcEndpointServiceName",
|
|
120
|
+
"description": "Grants permission to retrieve endpoint service name specific to a cluster",
|
|
121
|
+
"accessLevel": "Read",
|
|
122
|
+
"resourceTypes": [
|
|
123
|
+
{
|
|
124
|
+
"name": "Cluster",
|
|
125
|
+
"required": true,
|
|
126
|
+
"conditionKeys": [],
|
|
127
|
+
"dependentActions": []
|
|
128
|
+
}
|
|
129
|
+
],
|
|
130
|
+
"conditionKeys": [],
|
|
131
|
+
"dependentActions": []
|
|
132
|
+
},
|
|
118
133
|
"listclusters": {
|
|
119
134
|
"name": "ListClusters",
|
|
120
135
|
"description": "Grants permission to retrieve a list of clusters",
|
package/data/actions/ec2.json
CHANGED
|
@@ -746,6 +746,39 @@
|
|
|
746
746
|
],
|
|
747
747
|
"dependentActions": []
|
|
748
748
|
},
|
|
749
|
+
"associaterouteserver": {
|
|
750
|
+
"name": "AssociateRouteServer",
|
|
751
|
+
"description": "Grants permission to associate a route server with a VPC",
|
|
752
|
+
"accessLevel": "Write",
|
|
753
|
+
"resourceTypes": [
|
|
754
|
+
{
|
|
755
|
+
"name": "route-server",
|
|
756
|
+
"required": true,
|
|
757
|
+
"conditionKeys": [
|
|
758
|
+
"aws:ResourceTag/${TagKey}",
|
|
759
|
+
"ec2:ResourceTag/${TagKey}"
|
|
760
|
+
],
|
|
761
|
+
"dependentActions": []
|
|
762
|
+
},
|
|
763
|
+
{
|
|
764
|
+
"name": "vpc",
|
|
765
|
+
"required": true,
|
|
766
|
+
"conditionKeys": [
|
|
767
|
+
"aws:ResourceTag/${TagKey}",
|
|
768
|
+
"ec2:Ipv4IpamPoolId",
|
|
769
|
+
"ec2:Ipv6IpamPoolId",
|
|
770
|
+
"ec2:ResourceTag/${TagKey}",
|
|
771
|
+
"ec2:Tenancy",
|
|
772
|
+
"ec2:VpcID"
|
|
773
|
+
],
|
|
774
|
+
"dependentActions": []
|
|
775
|
+
}
|
|
776
|
+
],
|
|
777
|
+
"conditionKeys": [
|
|
778
|
+
"ec2:Region"
|
|
779
|
+
],
|
|
780
|
+
"dependentActions": []
|
|
781
|
+
},
|
|
749
782
|
"associateroutetable": {
|
|
750
783
|
"name": "AssociateRouteTable",
|
|
751
784
|
"description": "Grants permission to associate a subnet or gateway with a route table",
|
|
@@ -1717,7 +1750,20 @@
|
|
|
1717
1750
|
"conditionKeys": [
|
|
1718
1751
|
"aws:RequestTag/${TagKey}",
|
|
1719
1752
|
"aws:TagKeys",
|
|
1720
|
-
"ec2:
|
|
1753
|
+
"ec2:AvailabilityZone",
|
|
1754
|
+
"ec2:AvailabilityZoneId",
|
|
1755
|
+
"ec2:CapacityReservationFleet",
|
|
1756
|
+
"ec2:EbsOptimized",
|
|
1757
|
+
"ec2:EndDate",
|
|
1758
|
+
"ec2:EndDateType",
|
|
1759
|
+
"ec2:EphemeralStorage",
|
|
1760
|
+
"ec2:InstanceCount",
|
|
1761
|
+
"ec2:InstanceMatchCriteria",
|
|
1762
|
+
"ec2:InstancePlatform",
|
|
1763
|
+
"ec2:InstanceType",
|
|
1764
|
+
"ec2:OutpostArn",
|
|
1765
|
+
"ec2:PlacementGroup",
|
|
1766
|
+
"ec2:Tenancy"
|
|
1721
1767
|
],
|
|
1722
1768
|
"dependentActions": [
|
|
1723
1769
|
"ec2:CreateTags"
|
|
@@ -3413,6 +3459,112 @@
|
|
|
3413
3459
|
],
|
|
3414
3460
|
"dependentActions": []
|
|
3415
3461
|
},
|
|
3462
|
+
"createrouteserver": {
|
|
3463
|
+
"name": "CreateRouteServer",
|
|
3464
|
+
"description": "Grants permission to create a route server",
|
|
3465
|
+
"accessLevel": "Write",
|
|
3466
|
+
"resourceTypes": [
|
|
3467
|
+
{
|
|
3468
|
+
"name": "route-server",
|
|
3469
|
+
"required": true,
|
|
3470
|
+
"conditionKeys": [
|
|
3471
|
+
"aws:RequestTag/${TagKey}",
|
|
3472
|
+
"aws:TagKeys"
|
|
3473
|
+
],
|
|
3474
|
+
"dependentActions": [
|
|
3475
|
+
"ec2:CreateTags",
|
|
3476
|
+
"sns:CreateTopic"
|
|
3477
|
+
]
|
|
3478
|
+
}
|
|
3479
|
+
],
|
|
3480
|
+
"conditionKeys": [
|
|
3481
|
+
"ec2:Region"
|
|
3482
|
+
],
|
|
3483
|
+
"dependentActions": []
|
|
3484
|
+
},
|
|
3485
|
+
"createrouteserverendpoint": {
|
|
3486
|
+
"name": "CreateRouteServerEndpoint",
|
|
3487
|
+
"description": "Grants permission to create a route server endpoint",
|
|
3488
|
+
"accessLevel": "Write",
|
|
3489
|
+
"resourceTypes": [
|
|
3490
|
+
{
|
|
3491
|
+
"name": "route-server",
|
|
3492
|
+
"required": true,
|
|
3493
|
+
"conditionKeys": [
|
|
3494
|
+
"aws:ResourceTag/${TagKey}",
|
|
3495
|
+
"ec2:ResourceTag/${TagKey}"
|
|
3496
|
+
],
|
|
3497
|
+
"dependentActions": [
|
|
3498
|
+
"ec2:AuthorizeSecurityGroupIngress",
|
|
3499
|
+
"ec2:CreateNetworkInterface",
|
|
3500
|
+
"ec2:CreateNetworkInterfacePermission",
|
|
3501
|
+
"ec2:CreateSecurityGroup",
|
|
3502
|
+
"ec2:CreateTags",
|
|
3503
|
+
"ec2:DescribeSecurityGroups"
|
|
3504
|
+
]
|
|
3505
|
+
},
|
|
3506
|
+
{
|
|
3507
|
+
"name": "route-server-endpoint",
|
|
3508
|
+
"required": true,
|
|
3509
|
+
"conditionKeys": [
|
|
3510
|
+
"aws:RequestTag/${TagKey}",
|
|
3511
|
+
"aws:TagKeys",
|
|
3512
|
+
"ec2:AvailabilityZone"
|
|
3513
|
+
],
|
|
3514
|
+
"dependentActions": []
|
|
3515
|
+
},
|
|
3516
|
+
{
|
|
3517
|
+
"name": "subnet",
|
|
3518
|
+
"required": true,
|
|
3519
|
+
"conditionKeys": [
|
|
3520
|
+
"aws:ResourceTag/${TagKey}",
|
|
3521
|
+
"ec2:AvailabilityZone",
|
|
3522
|
+
"ec2:ResourceTag/${TagKey}",
|
|
3523
|
+
"ec2:SubnetID",
|
|
3524
|
+
"ec2:Vpc"
|
|
3525
|
+
],
|
|
3526
|
+
"dependentActions": []
|
|
3527
|
+
}
|
|
3528
|
+
],
|
|
3529
|
+
"conditionKeys": [
|
|
3530
|
+
"ec2:Region"
|
|
3531
|
+
],
|
|
3532
|
+
"dependentActions": []
|
|
3533
|
+
},
|
|
3534
|
+
"createrouteserverpeer": {
|
|
3535
|
+
"name": "CreateRouteServerPeer",
|
|
3536
|
+
"description": "Grants permission to create a route server peer",
|
|
3537
|
+
"accessLevel": "Write",
|
|
3538
|
+
"resourceTypes": [
|
|
3539
|
+
{
|
|
3540
|
+
"name": "route-server-endpoint",
|
|
3541
|
+
"required": true,
|
|
3542
|
+
"conditionKeys": [
|
|
3543
|
+
"aws:ResourceTag/${TagKey}",
|
|
3544
|
+
"ec2:AvailabilityZone",
|
|
3545
|
+
"ec2:ResourceTag/${TagKey}"
|
|
3546
|
+
],
|
|
3547
|
+
"dependentActions": [
|
|
3548
|
+
"ec2:AuthorizeSecurityGroupIngress",
|
|
3549
|
+
"ec2:CreateTags"
|
|
3550
|
+
]
|
|
3551
|
+
},
|
|
3552
|
+
{
|
|
3553
|
+
"name": "route-server-peer",
|
|
3554
|
+
"required": true,
|
|
3555
|
+
"conditionKeys": [
|
|
3556
|
+
"aws:RequestTag/${TagKey}",
|
|
3557
|
+
"aws:TagKeys",
|
|
3558
|
+
"ec2:AvailabilityZone"
|
|
3559
|
+
],
|
|
3560
|
+
"dependentActions": []
|
|
3561
|
+
}
|
|
3562
|
+
],
|
|
3563
|
+
"conditionKeys": [
|
|
3564
|
+
"ec2:Region"
|
|
3565
|
+
],
|
|
3566
|
+
"dependentActions": []
|
|
3567
|
+
},
|
|
3416
3568
|
"createroutetable": {
|
|
3417
3569
|
"name": "CreateRouteTable",
|
|
3418
3570
|
"description": "Grants permission to create a route table for a VPC",
|
|
@@ -6777,6 +6929,76 @@
|
|
|
6777
6929
|
],
|
|
6778
6930
|
"dependentActions": []
|
|
6779
6931
|
},
|
|
6932
|
+
"deleterouteserver": {
|
|
6933
|
+
"name": "DeleteRouteServer",
|
|
6934
|
+
"description": "Grants permission to delete a route server",
|
|
6935
|
+
"accessLevel": "Write",
|
|
6936
|
+
"resourceTypes": [
|
|
6937
|
+
{
|
|
6938
|
+
"name": "route-server",
|
|
6939
|
+
"required": true,
|
|
6940
|
+
"conditionKeys": [
|
|
6941
|
+
"aws:ResourceTag/${TagKey}",
|
|
6942
|
+
"ec2:ResourceTag/${TagKey}"
|
|
6943
|
+
],
|
|
6944
|
+
"dependentActions": [
|
|
6945
|
+
"sns:DeleteTopic"
|
|
6946
|
+
]
|
|
6947
|
+
}
|
|
6948
|
+
],
|
|
6949
|
+
"conditionKeys": [
|
|
6950
|
+
"ec2:Region"
|
|
6951
|
+
],
|
|
6952
|
+
"dependentActions": []
|
|
6953
|
+
},
|
|
6954
|
+
"deleterouteserverendpoint": {
|
|
6955
|
+
"name": "DeleteRouteServerEndpoint",
|
|
6956
|
+
"description": "Grants permission to delete a route server endpoint",
|
|
6957
|
+
"accessLevel": "Write",
|
|
6958
|
+
"resourceTypes": [
|
|
6959
|
+
{
|
|
6960
|
+
"name": "route-server-endpoint",
|
|
6961
|
+
"required": true,
|
|
6962
|
+
"conditionKeys": [
|
|
6963
|
+
"aws:ResourceTag/${TagKey}",
|
|
6964
|
+
"ec2:AvailabilityZone",
|
|
6965
|
+
"ec2:ResourceTag/${TagKey}"
|
|
6966
|
+
],
|
|
6967
|
+
"dependentActions": [
|
|
6968
|
+
"ec2:DeleteNetworkInterface",
|
|
6969
|
+
"ec2:DeleteSecurityGroup",
|
|
6970
|
+
"ec2:RevokeSecurityGroupIngress"
|
|
6971
|
+
]
|
|
6972
|
+
}
|
|
6973
|
+
],
|
|
6974
|
+
"conditionKeys": [
|
|
6975
|
+
"ec2:Region"
|
|
6976
|
+
],
|
|
6977
|
+
"dependentActions": []
|
|
6978
|
+
},
|
|
6979
|
+
"deleterouteserverpeer": {
|
|
6980
|
+
"name": "DeleteRouteServerPeer",
|
|
6981
|
+
"description": "Grants permission to delete a route server peer",
|
|
6982
|
+
"accessLevel": "Write",
|
|
6983
|
+
"resourceTypes": [
|
|
6984
|
+
{
|
|
6985
|
+
"name": "route-server-peer",
|
|
6986
|
+
"required": true,
|
|
6987
|
+
"conditionKeys": [
|
|
6988
|
+
"aws:ResourceTag/${TagKey}",
|
|
6989
|
+
"ec2:AvailabilityZone",
|
|
6990
|
+
"ec2:ResourceTag/${TagKey}"
|
|
6991
|
+
],
|
|
6992
|
+
"dependentActions": [
|
|
6993
|
+
"ec2:RevokeSecurityGroupIngress"
|
|
6994
|
+
]
|
|
6995
|
+
}
|
|
6996
|
+
],
|
|
6997
|
+
"conditionKeys": [
|
|
6998
|
+
"ec2:Region"
|
|
6999
|
+
],
|
|
7000
|
+
"dependentActions": []
|
|
7001
|
+
},
|
|
6780
7002
|
"deleteroutetable": {
|
|
6781
7003
|
"name": "DeleteRouteTable",
|
|
6782
7004
|
"description": "Grants permission to delete a route table",
|
|
@@ -8766,32 +8988,7 @@
|
|
|
8766
8988
|
"name": "DescribeCapacityBlockExtensionHistory",
|
|
8767
8989
|
"description": "Grants permission to describe Capacity Block extensions history",
|
|
8768
8990
|
"accessLevel": "List",
|
|
8769
|
-
"resourceTypes": [
|
|
8770
|
-
{
|
|
8771
|
-
"name": "capacity-reservation",
|
|
8772
|
-
"required": false,
|
|
8773
|
-
"conditionKeys": [
|
|
8774
|
-
"aws:ResourceTag/${TagKey}",
|
|
8775
|
-
"ec2:AvailabilityZone",
|
|
8776
|
-
"ec2:CapacityReservationFleet",
|
|
8777
|
-
"ec2:CreateDate",
|
|
8778
|
-
"ec2:DestinationCapacityReservationId",
|
|
8779
|
-
"ec2:EbsOptimized",
|
|
8780
|
-
"ec2:EndDate",
|
|
8781
|
-
"ec2:EndDateType",
|
|
8782
|
-
"ec2:InstanceCount",
|
|
8783
|
-
"ec2:InstanceMatchCriteria",
|
|
8784
|
-
"ec2:InstancePlatform",
|
|
8785
|
-
"ec2:InstanceType",
|
|
8786
|
-
"ec2:OutpostArn",
|
|
8787
|
-
"ec2:PlacementGroup",
|
|
8788
|
-
"ec2:ResourceTag/${TagKey}",
|
|
8789
|
-
"ec2:SourceCapacityReservationId",
|
|
8790
|
-
"ec2:Tenancy"
|
|
8791
|
-
],
|
|
8792
|
-
"dependentActions": []
|
|
8793
|
-
}
|
|
8794
|
-
],
|
|
8991
|
+
"resourceTypes": [],
|
|
8795
8992
|
"conditionKeys": [
|
|
8796
8993
|
"ec2:Region"
|
|
8797
8994
|
],
|
|
@@ -8942,23 +9139,7 @@
|
|
|
8942
9139
|
"name": "DescribeClientVpnEndpoints",
|
|
8943
9140
|
"description": "Grants permission to describe one or more Client VPN endpoints",
|
|
8944
9141
|
"accessLevel": "List",
|
|
8945
|
-
"resourceTypes": [
|
|
8946
|
-
{
|
|
8947
|
-
"name": "client-vpn-endpoint",
|
|
8948
|
-
"required": false,
|
|
8949
|
-
"conditionKeys": [
|
|
8950
|
-
"aws:ResourceTag/${TagKey}",
|
|
8951
|
-
"ec2:ClientRootCertificateChainArn",
|
|
8952
|
-
"ec2:CloudwatchLogGroupArn",
|
|
8953
|
-
"ec2:CloudwatchLogStreamArn",
|
|
8954
|
-
"ec2:DirectoryArn",
|
|
8955
|
-
"ec2:ResourceTag/${TagKey}",
|
|
8956
|
-
"ec2:SamlProviderArn",
|
|
8957
|
-
"ec2:ServerCertificateArn"
|
|
8958
|
-
],
|
|
8959
|
-
"dependentActions": []
|
|
8960
|
-
}
|
|
8961
|
-
],
|
|
9142
|
+
"resourceTypes": [],
|
|
8962
9143
|
"conditionKeys": [
|
|
8963
9144
|
"ec2:Region"
|
|
8964
9145
|
],
|
|
@@ -9893,6 +10074,36 @@
|
|
|
9893
10074
|
],
|
|
9894
10075
|
"dependentActions": []
|
|
9895
10076
|
},
|
|
10077
|
+
"describerouteserverendpoints": {
|
|
10078
|
+
"name": "DescribeRouteServerEndpoints",
|
|
10079
|
+
"description": "Grants permission to describe one or more route server endpoints",
|
|
10080
|
+
"accessLevel": "List",
|
|
10081
|
+
"resourceTypes": [],
|
|
10082
|
+
"conditionKeys": [
|
|
10083
|
+
"ec2:Region"
|
|
10084
|
+
],
|
|
10085
|
+
"dependentActions": []
|
|
10086
|
+
},
|
|
10087
|
+
"describerouteserverpeers": {
|
|
10088
|
+
"name": "DescribeRouteServerPeers",
|
|
10089
|
+
"description": "Grants permission to describe one or more route server peers",
|
|
10090
|
+
"accessLevel": "List",
|
|
10091
|
+
"resourceTypes": [],
|
|
10092
|
+
"conditionKeys": [
|
|
10093
|
+
"ec2:Region"
|
|
10094
|
+
],
|
|
10095
|
+
"dependentActions": []
|
|
10096
|
+
},
|
|
10097
|
+
"describerouteservers": {
|
|
10098
|
+
"name": "DescribeRouteServers",
|
|
10099
|
+
"description": "Grants permission to describe one or more route servers",
|
|
10100
|
+
"accessLevel": "List",
|
|
10101
|
+
"resourceTypes": [],
|
|
10102
|
+
"conditionKeys": [
|
|
10103
|
+
"ec2:Region"
|
|
10104
|
+
],
|
|
10105
|
+
"dependentActions": []
|
|
10106
|
+
},
|
|
9896
10107
|
"describeroutetables": {
|
|
9897
10108
|
"name": "DescribeRouteTables",
|
|
9898
10109
|
"description": "Grants permission to describe one or more route tables",
|
|
@@ -10479,19 +10690,7 @@
|
|
|
10479
10690
|
"name": "DescribeVpcEndpointAssociations",
|
|
10480
10691
|
"description": "Grants permission to describe the VPC endpoint associations",
|
|
10481
10692
|
"accessLevel": "List",
|
|
10482
|
-
"resourceTypes": [
|
|
10483
|
-
{
|
|
10484
|
-
"name": "vpc-endpoint",
|
|
10485
|
-
"required": false,
|
|
10486
|
-
"conditionKeys": [
|
|
10487
|
-
"aws:ResourceTag/${TagKey}",
|
|
10488
|
-
"ec2:ResourceTag/${TagKey}",
|
|
10489
|
-
"ec2:VpceServiceName",
|
|
10490
|
-
"ec2:VpceServiceOwner"
|
|
10491
|
-
],
|
|
10492
|
-
"dependentActions": []
|
|
10493
|
-
}
|
|
10494
|
-
],
|
|
10693
|
+
"resourceTypes": [],
|
|
10495
10694
|
"conditionKeys": [
|
|
10496
10695
|
"ec2:Region"
|
|
10497
10696
|
],
|
|
@@ -11057,6 +11256,37 @@
|
|
|
11057
11256
|
"organizations:DeregisterDelegatedAdministrator"
|
|
11058
11257
|
]
|
|
11059
11258
|
},
|
|
11259
|
+
"disablerouteserverpropagation": {
|
|
11260
|
+
"name": "DisableRouteServerPropagation",
|
|
11261
|
+
"description": "Grants permission to disable route server propagation",
|
|
11262
|
+
"accessLevel": "Write",
|
|
11263
|
+
"resourceTypes": [
|
|
11264
|
+
{
|
|
11265
|
+
"name": "route-server",
|
|
11266
|
+
"required": true,
|
|
11267
|
+
"conditionKeys": [
|
|
11268
|
+
"aws:ResourceTag/${TagKey}",
|
|
11269
|
+
"ec2:ResourceTag/${TagKey}"
|
|
11270
|
+
],
|
|
11271
|
+
"dependentActions": []
|
|
11272
|
+
},
|
|
11273
|
+
{
|
|
11274
|
+
"name": "route-table",
|
|
11275
|
+
"required": true,
|
|
11276
|
+
"conditionKeys": [
|
|
11277
|
+
"aws:ResourceTag/${TagKey}",
|
|
11278
|
+
"ec2:ResourceTag/${TagKey}",
|
|
11279
|
+
"ec2:RouteTableID",
|
|
11280
|
+
"ec2:Vpc"
|
|
11281
|
+
],
|
|
11282
|
+
"dependentActions": []
|
|
11283
|
+
}
|
|
11284
|
+
],
|
|
11285
|
+
"conditionKeys": [
|
|
11286
|
+
"ec2:Region"
|
|
11287
|
+
],
|
|
11288
|
+
"dependentActions": []
|
|
11289
|
+
},
|
|
11060
11290
|
"disableserialconsoleaccess": {
|
|
11061
11291
|
"name": "DisableSerialConsoleAccess",
|
|
11062
11292
|
"description": "Grants permission to disable access to the EC2 serial console of all instances for your account",
|
|
@@ -11450,6 +11680,39 @@
|
|
|
11450
11680
|
],
|
|
11451
11681
|
"dependentActions": []
|
|
11452
11682
|
},
|
|
11683
|
+
"disassociaterouteserver": {
|
|
11684
|
+
"name": "DisassociateRouteServer",
|
|
11685
|
+
"description": "Grants permission to disassociate a route server from a VPC",
|
|
11686
|
+
"accessLevel": "Write",
|
|
11687
|
+
"resourceTypes": [
|
|
11688
|
+
{
|
|
11689
|
+
"name": "route-server",
|
|
11690
|
+
"required": true,
|
|
11691
|
+
"conditionKeys": [
|
|
11692
|
+
"aws:ResourceTag/${TagKey}",
|
|
11693
|
+
"ec2:ResourceTag/${TagKey}"
|
|
11694
|
+
],
|
|
11695
|
+
"dependentActions": []
|
|
11696
|
+
},
|
|
11697
|
+
{
|
|
11698
|
+
"name": "vpc",
|
|
11699
|
+
"required": true,
|
|
11700
|
+
"conditionKeys": [
|
|
11701
|
+
"aws:ResourceTag/${TagKey}",
|
|
11702
|
+
"ec2:Ipv4IpamPoolId",
|
|
11703
|
+
"ec2:Ipv6IpamPoolId",
|
|
11704
|
+
"ec2:ResourceTag/${TagKey}",
|
|
11705
|
+
"ec2:Tenancy",
|
|
11706
|
+
"ec2:VpcID"
|
|
11707
|
+
],
|
|
11708
|
+
"dependentActions": []
|
|
11709
|
+
}
|
|
11710
|
+
],
|
|
11711
|
+
"conditionKeys": [
|
|
11712
|
+
"ec2:Region"
|
|
11713
|
+
],
|
|
11714
|
+
"dependentActions": []
|
|
11715
|
+
},
|
|
11453
11716
|
"disassociateroutetable": {
|
|
11454
11717
|
"name": "DisassociateRouteTable",
|
|
11455
11718
|
"description": "Grants permission to disassociate a subnet from a route table",
|
|
@@ -11982,6 +12245,37 @@
|
|
|
11982
12245
|
"organizations:EnableAWSServiceAccess"
|
|
11983
12246
|
]
|
|
11984
12247
|
},
|
|
12248
|
+
"enablerouteserverpropagation": {
|
|
12249
|
+
"name": "EnableRouteServerPropagation",
|
|
12250
|
+
"description": "Grants permission to enable route server propagation",
|
|
12251
|
+
"accessLevel": "Write",
|
|
12252
|
+
"resourceTypes": [
|
|
12253
|
+
{
|
|
12254
|
+
"name": "route-server",
|
|
12255
|
+
"required": true,
|
|
12256
|
+
"conditionKeys": [
|
|
12257
|
+
"aws:ResourceTag/${TagKey}",
|
|
12258
|
+
"ec2:ResourceTag/${TagKey}"
|
|
12259
|
+
],
|
|
12260
|
+
"dependentActions": []
|
|
12261
|
+
},
|
|
12262
|
+
{
|
|
12263
|
+
"name": "route-table",
|
|
12264
|
+
"required": true,
|
|
12265
|
+
"conditionKeys": [
|
|
12266
|
+
"aws:ResourceTag/${TagKey}",
|
|
12267
|
+
"ec2:ResourceTag/${TagKey}",
|
|
12268
|
+
"ec2:RouteTableID",
|
|
12269
|
+
"ec2:Vpc"
|
|
12270
|
+
],
|
|
12271
|
+
"dependentActions": []
|
|
12272
|
+
}
|
|
12273
|
+
],
|
|
12274
|
+
"conditionKeys": [
|
|
12275
|
+
"ec2:Region"
|
|
12276
|
+
],
|
|
12277
|
+
"dependentActions": []
|
|
12278
|
+
},
|
|
11985
12279
|
"enableserialconsoleaccess": {
|
|
11986
12280
|
"name": "EnableSerialConsoleAccess",
|
|
11987
12281
|
"description": "Grants permission to enable access to the EC2 serial console of all instances for your account",
|
|
@@ -12990,6 +13284,77 @@
|
|
|
12990
13284
|
],
|
|
12991
13285
|
"dependentActions": []
|
|
12992
13286
|
},
|
|
13287
|
+
"getrouteserverassociations": {
|
|
13288
|
+
"name": "GetRouteServerAssociations",
|
|
13289
|
+
"description": "Grants permission to get associations for a route server",
|
|
13290
|
+
"accessLevel": "Read",
|
|
13291
|
+
"resourceTypes": [
|
|
13292
|
+
{
|
|
13293
|
+
"name": "route-server",
|
|
13294
|
+
"required": true,
|
|
13295
|
+
"conditionKeys": [
|
|
13296
|
+
"aws:ResourceTag/${TagKey}",
|
|
13297
|
+
"ec2:ResourceTag/${TagKey}"
|
|
13298
|
+
],
|
|
13299
|
+
"dependentActions": []
|
|
13300
|
+
}
|
|
13301
|
+
],
|
|
13302
|
+
"conditionKeys": [
|
|
13303
|
+
"ec2:Region"
|
|
13304
|
+
],
|
|
13305
|
+
"dependentActions": []
|
|
13306
|
+
},
|
|
13307
|
+
"getrouteserverpropagations": {
|
|
13308
|
+
"name": "GetRouteServerPropagations",
|
|
13309
|
+
"description": "Grants permission to get propagations for a route server",
|
|
13310
|
+
"accessLevel": "Read",
|
|
13311
|
+
"resourceTypes": [
|
|
13312
|
+
{
|
|
13313
|
+
"name": "route-server",
|
|
13314
|
+
"required": true,
|
|
13315
|
+
"conditionKeys": [
|
|
13316
|
+
"aws:ResourceTag/${TagKey}",
|
|
13317
|
+
"ec2:ResourceTag/${TagKey}"
|
|
13318
|
+
],
|
|
13319
|
+
"dependentActions": []
|
|
13320
|
+
},
|
|
13321
|
+
{
|
|
13322
|
+
"name": "route-table",
|
|
13323
|
+
"required": false,
|
|
13324
|
+
"conditionKeys": [
|
|
13325
|
+
"aws:ResourceTag/${TagKey}",
|
|
13326
|
+
"ec2:ResourceTag/${TagKey}",
|
|
13327
|
+
"ec2:RouteTableID",
|
|
13328
|
+
"ec2:Vpc"
|
|
13329
|
+
],
|
|
13330
|
+
"dependentActions": []
|
|
13331
|
+
}
|
|
13332
|
+
],
|
|
13333
|
+
"conditionKeys": [
|
|
13334
|
+
"ec2:Region"
|
|
13335
|
+
],
|
|
13336
|
+
"dependentActions": []
|
|
13337
|
+
},
|
|
13338
|
+
"getrouteserverroutingdatabase": {
|
|
13339
|
+
"name": "GetRouteServerRoutingDatabase",
|
|
13340
|
+
"description": "Grants permission to get the routing database for a route server",
|
|
13341
|
+
"accessLevel": "Read",
|
|
13342
|
+
"resourceTypes": [
|
|
13343
|
+
{
|
|
13344
|
+
"name": "route-server",
|
|
13345
|
+
"required": true,
|
|
13346
|
+
"conditionKeys": [
|
|
13347
|
+
"aws:ResourceTag/${TagKey}",
|
|
13348
|
+
"ec2:ResourceTag/${TagKey}"
|
|
13349
|
+
],
|
|
13350
|
+
"dependentActions": []
|
|
13351
|
+
}
|
|
13352
|
+
],
|
|
13353
|
+
"conditionKeys": [
|
|
13354
|
+
"ec2:Region"
|
|
13355
|
+
],
|
|
13356
|
+
"dependentActions": []
|
|
13357
|
+
},
|
|
12993
13358
|
"getsecuritygroupsforvpc": {
|
|
12994
13359
|
"name": "GetSecurityGroupsForVpc",
|
|
12995
13360
|
"description": "Grants permission to retrieve a list of security groups for a specified VPC",
|
|
@@ -14691,6 +15056,26 @@
|
|
|
14691
15056
|
],
|
|
14692
15057
|
"dependentActions": []
|
|
14693
15058
|
},
|
|
15059
|
+
"modifyrouteserver": {
|
|
15060
|
+
"name": "ModifyRouteServer",
|
|
15061
|
+
"description": "Grants permission to modify a route server",
|
|
15062
|
+
"accessLevel": "Write",
|
|
15063
|
+
"resourceTypes": [
|
|
15064
|
+
{
|
|
15065
|
+
"name": "route-server",
|
|
15066
|
+
"required": true,
|
|
15067
|
+
"conditionKeys": [
|
|
15068
|
+
"aws:ResourceTag/${TagKey}",
|
|
15069
|
+
"ec2:ResourceTag/${TagKey}"
|
|
15070
|
+
],
|
|
15071
|
+
"dependentActions": []
|
|
15072
|
+
}
|
|
15073
|
+
],
|
|
15074
|
+
"conditionKeys": [
|
|
15075
|
+
"ec2:Region"
|
|
15076
|
+
],
|
|
15077
|
+
"dependentActions": []
|
|
15078
|
+
},
|
|
14694
15079
|
"modifysecuritygrouprules": {
|
|
14695
15080
|
"name": "ModifySecurityGroupRules",
|
|
14696
15081
|
"description": "Grants permission to modify the rules of a security group",
|
|
@@ -74,6 +74,11 @@
|
|
|
74
74
|
"description": "Filters access by the name of an Availability Zone in an AWS Region",
|
|
75
75
|
"type": "String"
|
|
76
76
|
},
|
|
77
|
+
"ec2:availabilityzoneid": {
|
|
78
|
+
"key": "ec2:AvailabilityZoneId",
|
|
79
|
+
"description": "Filters access by the ID of an Availability Zone in an AWS Region",
|
|
80
|
+
"type": "String"
|
|
81
|
+
},
|
|
77
82
|
"ec2:capacityreservationfleet": {
|
|
78
83
|
"key": "ec2:CapacityReservationFleet",
|
|
79
84
|
"description": "Filters access by the ARN of the Capacity Reservation Fleet",
|
|
@@ -159,6 +164,11 @@
|
|
|
159
164
|
"description": "Filters access by the way in which the Capacity Reservation ends",
|
|
160
165
|
"type": "String"
|
|
161
166
|
},
|
|
167
|
+
"ec2:ephemeralstorage": {
|
|
168
|
+
"key": "ec2:EphemeralStorage",
|
|
169
|
+
"description": "Filters access by whether the instance is enabled for ephemeral storage",
|
|
170
|
+
"type": "Bool"
|
|
171
|
+
},
|
|
162
172
|
"ec2:fisactionid": {
|
|
163
173
|
"key": "ec2:FisActionId",
|
|
164
174
|
"description": "Filters access by the ID of an AWS FIS action",
|
|
@@ -38,12 +38,14 @@
|
|
|
38
38
|
"ec2:Attribute",
|
|
39
39
|
"ec2:Attribute/${AttributeName}",
|
|
40
40
|
"ec2:AvailabilityZone",
|
|
41
|
+
"ec2:AvailabilityZoneId",
|
|
41
42
|
"ec2:CapacityReservationFleet",
|
|
42
43
|
"ec2:CreateDate",
|
|
43
44
|
"ec2:DestinationCapacityReservationId",
|
|
44
45
|
"ec2:EbsOptimized",
|
|
45
46
|
"ec2:EndDate",
|
|
46
47
|
"ec2:EndDateType",
|
|
48
|
+
"ec2:EphemeralStorage",
|
|
47
49
|
"ec2:InstanceCount",
|
|
48
50
|
"ec2:InstanceMatchCriteria",
|
|
49
51
|
"ec2:InstancePlatform",
|
|
@@ -715,6 +717,41 @@
|
|
|
715
717
|
"key": "role",
|
|
716
718
|
"arn": "arn:${Partition}:iam::${Account}:role/${RoleNameWithPath}"
|
|
717
719
|
},
|
|
720
|
+
"route-server-endpoint": {
|
|
721
|
+
"key": "route-server-endpoint",
|
|
722
|
+
"arn": "arn:${Partition}:ec2:${Region}:${Account}:route-server-endpoint/${RouteServerEndpointId}",
|
|
723
|
+
"conditionKeys": [
|
|
724
|
+
"aws:RequestTag/${TagKey}",
|
|
725
|
+
"aws:ResourceTag/${TagKey}",
|
|
726
|
+
"aws:TagKeys",
|
|
727
|
+
"ec2:AvailabilityZone",
|
|
728
|
+
"ec2:Region",
|
|
729
|
+
"ec2:ResourceTag/${TagKey}"
|
|
730
|
+
]
|
|
731
|
+
},
|
|
732
|
+
"route-server": {
|
|
733
|
+
"key": "route-server",
|
|
734
|
+
"arn": "arn:${Partition}:ec2:${Region}:${Account}:route-server/${RouteServerId}",
|
|
735
|
+
"conditionKeys": [
|
|
736
|
+
"aws:RequestTag/${TagKey}",
|
|
737
|
+
"aws:ResourceTag/${TagKey}",
|
|
738
|
+
"aws:TagKeys",
|
|
739
|
+
"ec2:Region",
|
|
740
|
+
"ec2:ResourceTag/${TagKey}"
|
|
741
|
+
]
|
|
742
|
+
},
|
|
743
|
+
"route-server-peer": {
|
|
744
|
+
"key": "route-server-peer",
|
|
745
|
+
"arn": "arn:${Partition}:ec2:${Region}:${Account}:route-server-peer/${RouteServerPeerId}",
|
|
746
|
+
"conditionKeys": [
|
|
747
|
+
"aws:RequestTag/${TagKey}",
|
|
748
|
+
"aws:ResourceTag/${TagKey}",
|
|
749
|
+
"aws:TagKeys",
|
|
750
|
+
"ec2:AvailabilityZone",
|
|
751
|
+
"ec2:Region",
|
|
752
|
+
"ec2:ResourceTag/${TagKey}"
|
|
753
|
+
]
|
|
754
|
+
},
|
|
718
755
|
"route-table": {
|
|
719
756
|
"key": "route-table",
|
|
720
757
|
"arn": "arn:${Partition}:ec2:${Region}:${Account}:route-table/${RouteTableId}",
|
package/package.json
CHANGED
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cloud-copilot/iam-data",
|
|
3
|
-
"version": "0.9.
|
|
3
|
+
"version": "0.9.202504301",
|
|
4
4
|
"description": "AWS IAM Data",
|
|
5
5
|
"repository": "github:cloud-copilot/iam-data",
|
|
6
|
-
"updatedAt": "2025-04-
|
|
6
|
+
"updatedAt": "2025-04-30T04:48:40.474Z",
|
|
7
7
|
"exports": {
|
|
8
8
|
".": {
|
|
9
9
|
"import": "./dist/esm/index.js",
|