aws-iam-data 0.0.113 → 0.0.114

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/data/json/changelog.json +56 -0
  2. package/dist/data/json/iam.json +1088 -91
  3. package/dist/data/json/metadata.json +90 -20
  4. package/dist/data/json/reports.json +13 -13
  5. package/package.json +1 -1
package/dist/data/json/iam.json CHANGED
@@ -41931,12 +41931,18 @@
41931
41931
  "name": "GetInsightSelectors",
41932
41932
  "apiReferenceUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_GetInsightSelectors.html",
41933
41933
  "permissionOnly": false,
41934
- "description": "Grants permission to list CloudTrail Insights selectors that are configured for a trail",
41934
+ "description": "Grants permission to list CloudTrail Insights selectors that are configured for a trail or event data store",
41935
41935
  "accessLevel": "Read",
41936
41936
  "resourceTypes": [
41937
+ {
41938
+ "resourceType": "eventdatastore",
41939
+ "required": false,
41940
+ "conditionKeys": [],
41941
+ "dependentActions": []
41942
+ },
41937
41943
  {
41938
41944
  "resourceType": "trail",
41939
- "required": true,
41945
+ "required": false,
41940
41946
  "conditionKeys": [],
41941
41947
  "dependentActions": []
41942
41948
  }
@@ -42201,12 +42207,18 @@
42201
42207
  "name": "PutInsightSelectors",
42202
42208
  "apiReferenceUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_PutInsightSelectors.html",
42203
42209
  "permissionOnly": false,
42204
- "description": "Grants permission to create and update CloudTrail Insights selectors for a trail",
42210
+ "description": "Grants permission to create and update CloudTrail Insights selectors for a trail or event data store",
42205
42211
  "accessLevel": "Write",
42206
42212
  "resourceTypes": [
42213
+ {
42214
+ "resourceType": "eventdatastore",
42215
+ "required": false,
42216
+ "conditionKeys": [],
42217
+ "dependentActions": []
42218
+ },
42207
42219
  {
42208
42220
  "resourceType": "trail",
42209
- "required": true,
42221
+ "required": false,
42210
42222
  "conditionKeys": [],
42211
42223
  "dependentActions": []
42212
42224
  }
@@ -44911,6 +44923,42 @@
44911
44923
  }
44912
44924
  ]
44913
44925
  },
44926
+ {
44927
+ "name": "CreateDelivery",
44928
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateDelivery.html",
44929
+ "permissionOnly": false,
44930
+ "description": "Grants permission to create a delivery connecting a delivery source to a delivery destination",
44931
+ "accessLevel": "Write",
44932
+ "resourceTypes": [
44933
+ {
44934
+ "resourceType": "delivery",
44935
+ "required": true,
44936
+ "conditionKeys": [],
44937
+ "dependentActions": []
44938
+ },
44939
+ {
44940
+ "resourceType": "delivery-destination",
44941
+ "required": true,
44942
+ "conditionKeys": [],
44943
+ "dependentActions": []
44944
+ },
44945
+ {
44946
+ "resourceType": "delivery-source",
44947
+ "required": true,
44948
+ "conditionKeys": [],
44949
+ "dependentActions": []
44950
+ },
44951
+ {
44952
+ "resourceType": "",
44953
+ "required": false,
44954
+ "conditionKeys": [
44955
+ "aws:TagKeys",
44956
+ "aws:RequestTag/${TagKey}"
44957
+ ],
44958
+ "dependentActions": []
44959
+ }
44960
+ ]
44961
+ },
44914
44962
  {
44915
44963
  "name": "CreateExportTask",
44916
44964
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateExportTask.html",
@@ -45010,6 +45058,66 @@
45010
45058
  }
45011
45059
  ]
45012
45060
  },
45061
+ {
45062
+ "name": "DeleteDelivery",
45063
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteDelivery.html",
45064
+ "permissionOnly": false,
45065
+ "description": "Grants permission to delete a delivery",
45066
+ "accessLevel": "Write",
45067
+ "resourceTypes": [
45068
+ {
45069
+ "resourceType": "delivery",
45070
+ "required": true,
45071
+ "conditionKeys": [],
45072
+ "dependentActions": []
45073
+ }
45074
+ ]
45075
+ },
45076
+ {
45077
+ "name": "DeleteDeliveryDestination",
45078
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteDeliveryDestination.html",
45079
+ "permissionOnly": false,
45080
+ "description": "Grants permission to delete a delivery destination after all associated deliveries are deleted",
45081
+ "accessLevel": "Write",
45082
+ "resourceTypes": [
45083
+ {
45084
+ "resourceType": "delivery-destination",
45085
+ "required": true,
45086
+ "conditionKeys": [],
45087
+ "dependentActions": []
45088
+ }
45089
+ ]
45090
+ },
45091
+ {
45092
+ "name": "DeleteDeliveryDestinationPolicy",
45093
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteDeliveryDestinationPolicy.html",
45094
+ "permissionOnly": false,
45095
+ "description": "Grants permission to delete a delivery destination policy associated with a delivery destination",
45096
+ "accessLevel": "Write",
45097
+ "resourceTypes": [
45098
+ {
45099
+ "resourceType": "delivery-destination",
45100
+ "required": true,
45101
+ "conditionKeys": [],
45102
+ "dependentActions": []
45103
+ }
45104
+ ]
45105
+ },
45106
+ {
45107
+ "name": "DeleteDeliverySource",
45108
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteDeliverySource.html",
45109
+ "permissionOnly": false,
45110
+ "description": "Grants permission to delete a delivery source after all associated deliveries are deleted",
45111
+ "accessLevel": "Write",
45112
+ "resourceTypes": [
45113
+ {
45114
+ "resourceType": "delivery-destination",
45115
+ "required": true,
45116
+ "conditionKeys": [],
45117
+ "dependentActions": []
45118
+ }
45119
+ ]
45120
+ },
45013
45121
  {
45014
45122
  "name": "DeleteDestination",
45015
45123
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeleteDestination.html",
@@ -45160,6 +45268,51 @@
45160
45268
  }
45161
45269
  ]
45162
45270
  },
45271
+ {
45272
+ "name": "DescribeDeliveries",
45273
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DescribeDeliveries.html",
45274
+ "permissionOnly": false,
45275
+ "description": "Grants permission to retrieve a list of deliveries an account",
45276
+ "accessLevel": "List",
45277
+ "resourceTypes": [
45278
+ {
45279
+ "resourceType": "",
45280
+ "required": false,
45281
+ "conditionKeys": [],
45282
+ "dependentActions": []
45283
+ }
45284
+ ]
45285
+ },
45286
+ {
45287
+ "name": "DescribeDeliveryDestinations",
45288
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DescribeDeliveryDestinations.html",
45289
+ "permissionOnly": false,
45290
+ "description": "Grants permission to retrieve a list of delivery destinations an account",
45291
+ "accessLevel": "List",
45292
+ "resourceTypes": [
45293
+ {
45294
+ "resourceType": "",
45295
+ "required": false,
45296
+ "conditionKeys": [],
45297
+ "dependentActions": []
45298
+ }
45299
+ ]
45300
+ },
45301
+ {
45302
+ "name": "DescribeDeliverySources",
45303
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DescribeDeliverySources.html",
45304
+ "permissionOnly": false,
45305
+ "description": "Grants permission to retrieve a list of delivery sources in an account",
45306
+ "accessLevel": "List",
45307
+ "resourceTypes": [
45308
+ {
45309
+ "resourceType": "",
45310
+ "required": false,
45311
+ "conditionKeys": [],
45312
+ "dependentActions": []
45313
+ }
45314
+ ]
45315
+ },
45163
45316
  {
45164
45317
  "name": "DescribeDestinations",
45165
45318
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DescribeDestinations.html",
@@ -45340,6 +45493,66 @@
45340
45493
  }
45341
45494
  ]
45342
45495
  },
45496
+ {
45497
+ "name": "GetDelivery",
45498
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetDelivery.html",
45499
+ "permissionOnly": false,
45500
+ "description": "Grants permission to retrieve a single delivery",
45501
+ "accessLevel": "Read",
45502
+ "resourceTypes": [
45503
+ {
45504
+ "resourceType": "delivery",
45505
+ "required": true,
45506
+ "conditionKeys": [],
45507
+ "dependentActions": []
45508
+ }
45509
+ ]
45510
+ },
45511
+ {
45512
+ "name": "GetDeliveryDestination",
45513
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetDeliveryDestination.html",
45514
+ "permissionOnly": false,
45515
+ "description": "Grants permission to retrieve a single delivery destination",
45516
+ "accessLevel": "Read",
45517
+ "resourceTypes": [
45518
+ {
45519
+ "resourceType": "delivery-destination",
45520
+ "required": true,
45521
+ "conditionKeys": [],
45522
+ "dependentActions": []
45523
+ }
45524
+ ]
45525
+ },
45526
+ {
45527
+ "name": "GetDeliveryDestinationPolicy",
45528
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetDeliveryDestinationPolicy.html",
45529
+ "permissionOnly": false,
45530
+ "description": "Grants permission to retrieve a delivery destination policy attached to a delivery destination",
45531
+ "accessLevel": "Read",
45532
+ "resourceTypes": [
45533
+ {
45534
+ "resourceType": "delivery-destination",
45535
+ "required": true,
45536
+ "conditionKeys": [],
45537
+ "dependentActions": []
45538
+ }
45539
+ ]
45540
+ },
45541
+ {
45542
+ "name": "GetDeliverySource",
45543
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetDeliverySource.html",
45544
+ "permissionOnly": false,
45545
+ "description": "Grants permission to retrieve a single delivery source",
45546
+ "accessLevel": "Read",
45547
+ "resourceTypes": [
45548
+ {
45549
+ "resourceType": "delivery-source",
45550
+ "required": true,
45551
+ "conditionKeys": [],
45552
+ "dependentActions": []
45553
+ }
45554
+ ]
45555
+ },
45343
45556
  {
45344
45557
  "name": "GetLogDelivery",
45345
45558
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html",
@@ -45452,6 +45665,24 @@
45452
45665
  "description": "Grants permission to list the tags for the specified resource",
45453
45666
  "accessLevel": "List",
45454
45667
  "resourceTypes": [
45668
+ {
45669
+ "resourceType": "delivery",
45670
+ "required": false,
45671
+ "conditionKeys": [],
45672
+ "dependentActions": []
45673
+ },
45674
+ {
45675
+ "resourceType": "delivery-destination",
45676
+ "required": false,
45677
+ "conditionKeys": [],
45678
+ "dependentActions": []
45679
+ },
45680
+ {
45681
+ "resourceType": "delivery-source",
45682
+ "required": false,
45683
+ "conditionKeys": [],
45684
+ "dependentActions": []
45685
+ },
45455
45686
  {
45456
45687
  "resourceType": "destination",
45457
45688
  "required": false,
@@ -45511,6 +45742,71 @@
45511
45742
  }
45512
45743
  ]
45513
45744
  },
45745
+ {
45746
+ "name": "PutDeliveryDestination",
45747
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDeliveryDestination.html",
45748
+ "permissionOnly": false,
45749
+ "description": "Grants permission to create/update a delivery destination",
45750
+ "accessLevel": "Write",
45751
+ "resourceTypes": [
45752
+ {
45753
+ "resourceType": "delivery-destination",
45754
+ "required": true,
45755
+ "conditionKeys": [],
45756
+ "dependentActions": []
45757
+ },
45758
+ {
45759
+ "resourceType": "",
45760
+ "required": false,
45761
+ "conditionKeys": [
45762
+ "aws:TagKeys",
45763
+ "aws:RequestTag/${TagKey}",
45764
+ "logs:DeliveryDestinationResourceArn"
45765
+ ],
45766
+ "dependentActions": []
45767
+ }
45768
+ ]
45769
+ },
45770
+ {
45771
+ "name": "PutDeliveryDestinationPolicy",
45772
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDeliveryDestinationPolicy.html",
45773
+ "permissionOnly": false,
45774
+ "description": "Grants permission to attach a delivery destination policy to a delivery destination",
45775
+ "accessLevel": "Write",
45776
+ "resourceTypes": [
45777
+ {
45778
+ "resourceType": "delivery-destination",
45779
+ "required": true,
45780
+ "conditionKeys": [],
45781
+ "dependentActions": []
45782
+ }
45783
+ ]
45784
+ },
45785
+ {
45786
+ "name": "PutDeliverySource",
45787
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDeliverySource.html",
45788
+ "permissionOnly": false,
45789
+ "description": "Grants permission to create/update a delivery source",
45790
+ "accessLevel": "Write",
45791
+ "resourceTypes": [
45792
+ {
45793
+ "resourceType": "delivery-source",
45794
+ "required": true,
45795
+ "conditionKeys": [],
45796
+ "dependentActions": []
45797
+ },
45798
+ {
45799
+ "resourceType": "",
45800
+ "required": false,
45801
+ "conditionKeys": [
45802
+ "aws:TagKeys",
45803
+ "aws:RequestTag/${TagKey}",
45804
+ "logs:LogGeneratingResourceArns"
45805
+ ],
45806
+ "dependentActions": []
45807
+ }
45808
+ ]
45809
+ },
45514
45810
  {
45515
45811
  "name": "PutDestination",
45516
45812
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutDestination.html",
@@ -45741,6 +46037,24 @@
45741
46037
  "description": "Grants permission to add or update the specified tags for the specified resource",
45742
46038
  "accessLevel": "Tagging",
45743
46039
  "resourceTypes": [
46040
+ {
46041
+ "resourceType": "delivery",
46042
+ "required": false,
46043
+ "conditionKeys": [],
46044
+ "dependentActions": []
46045
+ },
46046
+ {
46047
+ "resourceType": "delivery-destination",
46048
+ "required": false,
46049
+ "conditionKeys": [],
46050
+ "dependentActions": []
46051
+ },
46052
+ {
46053
+ "resourceType": "delivery-source",
46054
+ "required": false,
46055
+ "conditionKeys": [],
46056
+ "dependentActions": []
46057
+ },
45744
46058
  {
45745
46059
  "resourceType": "destination",
45746
46060
  "required": false,
@@ -45824,6 +46138,24 @@
45824
46138
  "description": "Grants permission to remove the specified tags from the specified resource",
45825
46139
  "accessLevel": "Tagging",
45826
46140
  "resourceTypes": [
46141
+ {
46142
+ "resourceType": "delivery",
46143
+ "required": false,
46144
+ "conditionKeys": [],
46145
+ "dependentActions": []
46146
+ },
46147
+ {
46148
+ "resourceType": "delivery-destination",
46149
+ "required": false,
46150
+ "conditionKeys": [],
46151
+ "dependentActions": []
46152
+ },
46153
+ {
46154
+ "resourceType": "delivery-source",
46155
+ "required": false,
46156
+ "conditionKeys": [],
46157
+ "dependentActions": []
46158
+ },
45827
46159
  {
45828
46160
  "resourceType": "destination",
45829
46161
  "required": false,
@@ -45886,6 +46218,30 @@
45886
46218
  "conditionKeys": [
45887
46219
  "aws:ResourceTag/${TagKey}"
45888
46220
  ]
46221
+ },
46222
+ {
46223
+ "name": "delivery-source",
46224
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeliverySource.html",
46225
+ "arnPattern": "arn:${Partition}:logs:${Region}:${Account}:delivery-source:${DeliverySourceName}",
46226
+ "conditionKeys": [
46227
+ "aws:ResourceTag/${TagKey}"
46228
+ ]
46229
+ },
46230
+ {
46231
+ "name": "delivery",
46232
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_Delivery.html",
46233
+ "arnPattern": "arn:${Partition}:logs:${Region}:${Account}:delivery:${DeliveryName}",
46234
+ "conditionKeys": [
46235
+ "aws:ResourceTag/${TagKey}"
46236
+ ]
46237
+ },
46238
+ {
46239
+ "name": "delivery-destination",
46240
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_DeliveryDestination.html",
46241
+ "arnPattern": "arn:${Partition}:logs:${Region}:${Account}:delivery-destination:${DeliverySourceName}",
46242
+ "conditionKeys": [
46243
+ "aws:ResourceTag/${TagKey}"
46244
+ ]
45889
46245
  }
45890
46246
  ],
45891
46247
  "conditionKeys": [
@@ -45906,6 +46262,18 @@
45906
46262
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
45907
46263
  "description": "Filters access by the tag keys that are passed in the request",
45908
46264
  "type": "ArrayOfString"
46265
+ },
46266
+ {
46267
+ "name": "logs:DeliveryDestinationResourceArn",
46268
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/iam-identity-based-access-control-cwl.html",
46269
+ "description": "Filters access by the Log Destination ARN passed in the request",
46270
+ "type": "ARN"
46271
+ },
46272
+ {
46273
+ "name": "logs:LogGeneratingResourceArns",
46274
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/iam-identity-based-access-control-cwl.html",
46275
+ "description": "Filters access by the Log Generating Resource ARNs passed in the request",
46276
+ "type": "ArrayOfARN"
45909
46277
  }
45910
46278
  ]
45911
46279
  },
@@ -57661,7 +58029,10 @@
57661
58029
  {
57662
58030
  "resourceType": "document-classifier-endpoint",
57663
58031
  "required": true,
57664
- "conditionKeys": [],
58032
+ "conditionKeys": [
58033
+ "aws:RequestTag/${TagKey}",
58034
+ "aws:TagKeys"
58035
+ ],
57665
58036
  "dependentActions": []
57666
58037
  },
57667
58038
  {
@@ -57673,7 +58044,10 @@
57673
58044
  {
57674
58045
  "resourceType": "entity-recognizer-endpoint",
57675
58046
  "required": true,
57676
- "conditionKeys": [],
58047
+ "conditionKeys": [
58048
+ "aws:RequestTag/${TagKey}",
58049
+ "aws:TagKeys"
58050
+ ],
57677
58051
  "dependentActions": []
57678
58052
  },
57679
58053
  {
@@ -57681,15 +58055,6 @@
57681
58055
  "required": false,
57682
58056
  "conditionKeys": [],
57683
58057
  "dependentActions": []
57684
- },
57685
- {
57686
- "resourceType": "",
57687
- "required": false,
57688
- "conditionKeys": [
57689
- "aws:RequestTag/${TagKey}",
57690
- "aws:TagKeys"
57691
- ],
57692
- "dependentActions": []
57693
58058
  }
57694
58059
  ]
57695
58060
  },
@@ -57731,7 +58096,15 @@
57731
58096
  {
57732
58097
  "resourceType": "flywheel",
57733
58098
  "required": true,
57734
- "conditionKeys": [],
58099
+ "conditionKeys": [
58100
+ "aws:RequestTag/${TagKey}",
58101
+ "aws:TagKeys",
58102
+ "comprehend:VolumeKmsKey",
58103
+ "comprehend:ModelKmsKey",
58104
+ "comprehend:DataLakeKmsKey",
58105
+ "comprehend:VpcSecurityGroupIds",
58106
+ "comprehend:VpcSubnets"
58107
+ ],
57735
58108
  "dependentActions": []
57736
58109
  },
57737
58110
  {
@@ -57745,20 +58118,6 @@
57745
58118
  "required": false,
57746
58119
  "conditionKeys": [],
57747
58120
  "dependentActions": []
57748
- },
57749
- {
57750
- "resourceType": "",
57751
- "required": false,
57752
- "conditionKeys": [
57753
- "aws:RequestTag/${TagKey}",
57754
- "aws:TagKeys",
57755
- "comprehend:VolumeKmsKey",
57756
- "comprehend:ModelKmsKey",
57757
- "comprehend:DataLakeKmsKey",
57758
- "comprehend:VpcSecurityGroupIds",
57759
- "comprehend:VpcSubnets"
57760
- ],
57761
- "dependentActions": []
57762
58121
  }
57763
58122
  ]
57764
58123
  },
@@ -58214,6 +58573,21 @@
58214
58573
  }
58215
58574
  ]
58216
58575
  },
58576
+ {
58577
+ "name": "DetectToxicContent",
58578
+ "apiReferenceUrl": "https://docs.aws.amazon.com/comprehend/latest/APIReference/API_DetectToxicContent.html",
58579
+ "permissionOnly": false,
58580
+ "description": "Grants permission to detect toxic content within the given list of text segments",
58581
+ "accessLevel": "Read",
58582
+ "resourceTypes": [
58583
+ {
58584
+ "resourceType": "",
58585
+ "required": false,
58586
+ "conditionKeys": [],
58587
+ "dependentActions": []
58588
+ }
58589
+ ]
58590
+ },
58217
58591
  {
58218
58592
  "name": "ImportModel",
58219
58593
  "apiReferenceUrl": "https://docs.aws.amazon.com/comprehend/latest/APIReference/API_ImportModel.html",
@@ -58630,7 +59004,14 @@
58630
59004
  {
58631
59005
  "resourceType": "document-classification-job",
58632
59006
  "required": true,
58633
- "conditionKeys": [],
59007
+ "conditionKeys": [
59008
+ "aws:RequestTag/${TagKey}",
59009
+ "aws:TagKeys",
59010
+ "comprehend:VolumeKmsKey",
59011
+ "comprehend:OutputKmsKey",
59012
+ "comprehend:VpcSecurityGroupIds",
59013
+ "comprehend:VpcSubnets"
59014
+ ],
58634
59015
  "dependentActions": []
58635
59016
  },
58636
59017
  {
@@ -58644,19 +59025,6 @@
58644
59025
  "required": false,
58645
59026
  "conditionKeys": [],
58646
59027
  "dependentActions": []
58647
- },
58648
- {
58649
- "resourceType": "",
58650
- "required": false,
58651
- "conditionKeys": [
58652
- "aws:RequestTag/${TagKey}",
58653
- "aws:TagKeys",
58654
- "comprehend:VolumeKmsKey",
58655
- "comprehend:OutputKmsKey",
58656
- "comprehend:VpcSecurityGroupIds",
58657
- "comprehend:VpcSubnets"
58658
- ],
58659
- "dependentActions": []
58660
59028
  }
58661
59029
  ]
58662
59030
  },
@@ -58698,7 +59066,14 @@
58698
59066
  {
58699
59067
  "resourceType": "entities-detection-job",
58700
59068
  "required": true,
58701
- "conditionKeys": [],
59069
+ "conditionKeys": [
59070
+ "aws:RequestTag/${TagKey}",
59071
+ "aws:TagKeys",
59072
+ "comprehend:VolumeKmsKey",
59073
+ "comprehend:OutputKmsKey",
59074
+ "comprehend:VpcSecurityGroupIds",
59075
+ "comprehend:VpcSubnets"
59076
+ ],
58702
59077
  "dependentActions": []
58703
59078
  },
58704
59079
  {
@@ -58712,19 +59087,6 @@
58712
59087
  "required": false,
58713
59088
  "conditionKeys": [],
58714
59089
  "dependentActions": []
58715
- },
58716
- {
58717
- "resourceType": "",
58718
- "required": false,
58719
- "conditionKeys": [
58720
- "aws:RequestTag/${TagKey}",
58721
- "aws:TagKeys",
58722
- "comprehend:VolumeKmsKey",
58723
- "comprehend:OutputKmsKey",
58724
- "comprehend:VpcSecurityGroupIds",
58725
- "comprehend:VpcSubnets"
58726
- ],
58727
- "dependentActions": []
58728
59090
  }
58729
59091
  ]
58730
59092
  },
@@ -59292,7 +59654,12 @@
59292
59654
  {
59293
59655
  "resourceType": "flywheel",
59294
59656
  "required": true,
59295
- "conditionKeys": [],
59657
+ "conditionKeys": [
59658
+ "comprehend:VolumeKmsKey",
59659
+ "comprehend:ModelKmsKey",
59660
+ "comprehend:VpcSecurityGroupIds",
59661
+ "comprehend:VpcSubnets"
59662
+ ],
59296
59663
  "dependentActions": []
59297
59664
  },
59298
59665
  {
@@ -59306,17 +59673,6 @@
59306
59673
  "required": false,
59307
59674
  "conditionKeys": [],
59308
59675
  "dependentActions": []
59309
- },
59310
- {
59311
- "resourceType": "",
59312
- "required": false,
59313
- "conditionKeys": [
59314
- "comprehend:VolumeKmsKey",
59315
- "comprehend:ModelKmsKey",
59316
- "comprehend:VpcSecurityGroupIds",
59317
- "comprehend:VpcSubnets"
59318
- ],
59319
- "dependentActions": []
59320
59676
  }
59321
59677
  ]
59322
59678
  }
@@ -104668,6 +105024,34 @@
104668
105024
  }
104669
105025
  ]
104670
105026
  },
105027
+ {
105028
+ "name": "GetSecurityGroupsForVpc",
105029
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSecurityGroupsForVpc.html",
105030
+ "permissionOnly": false,
105031
+ "description": "Grants permission to retrieve a list of security groups for a specified VPC",
105032
+ "accessLevel": "Read",
105033
+ "resourceTypes": [
105034
+ {
105035
+ "resourceType": "vpc",
105036
+ "required": true,
105037
+ "conditionKeys": [
105038
+ "aws:ResourceTag/${TagKey}",
105039
+ "ec2:ResourceTag/${TagKey}",
105040
+ "ec2:Tenancy",
105041
+ "ec2:VpcID"
105042
+ ],
105043
+ "dependentActions": []
105044
+ },
105045
+ {
105046
+ "resourceType": "",
105047
+ "required": false,
105048
+ "conditionKeys": [
105049
+ "ec2:Region"
105050
+ ],
105051
+ "dependentActions": []
105052
+ }
105053
+ ]
105054
+ },
104671
105055
  {
104672
105056
  "name": "GetSerialConsoleAccessStatus",
104673
105057
  "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSerialConsoleAccessStatus.html",
@@ -105304,6 +105688,25 @@
105304
105688
  }
105305
105689
  ]
105306
105690
  },
105691
+ {
105692
+ "name": "InjectApiError",
105693
+ "apiReferenceUrl": "https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html",
105694
+ "permissionOnly": true,
105695
+ "description": "Grants permission to temporarily inject errors for target API requests",
105696
+ "accessLevel": "Write",
105697
+ "resourceTypes": [
105698
+ {
105699
+ "resourceType": "",
105700
+ "required": false,
105701
+ "conditionKeys": [
105702
+ "ec2:FisActionId",
105703
+ "ec2:FisTargetArns",
105704
+ "ec2:Region"
105705
+ ],
105706
+ "dependentActions": []
105707
+ }
105708
+ ]
105709
+ },
105307
105710
  {
105308
105711
  "name": "ListImagesInRecycleBin",
105309
105712
  "apiReferenceUrl": "https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ListImagesInRecycleBin.html",
@@ -106560,8 +106963,6 @@
106560
106963
  "required": true,
106561
106964
  "conditionKeys": [
106562
106965
  "aws:ResourceTag/${TagKey}",
106563
- "ec2:Attribute",
106564
- "ec2:Attribute/${AttributeName}",
106565
106966
  "ec2:ResourceTag/${TagKey}",
106566
106967
  "ec2:SecurityGroupID",
106567
106968
  "ec2:Vpc"
@@ -111637,6 +112038,18 @@
111637
112038
  "description": "Filters access by whether the EBS volume is encrypted",
111638
112039
  "type": "Bool"
111639
112040
  },
112041
+ {
112042
+ "name": "ec2:FisActionId",
112043
+ "apiReferenceUrl": "https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html",
112044
+ "description": "Filters access by the ID of an AWS FIS action",
112045
+ "type": "String"
112046
+ },
112047
+ {
112048
+ "name": "ec2:FisTargetArns",
112049
+ "apiReferenceUrl": "https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html",
112050
+ "description": "Filters access by the ARN of an AWS FIS target",
112051
+ "type": "ArrayOfARN"
112052
+ },
111640
112053
  {
111641
112054
  "name": "ec2:GatewayType",
111642
112055
  "apiReferenceUrl": "https://docs.aws.amazon.com/vpn/latest/s2svpn/vpn-authentication-access-control.html",
@@ -121834,6 +122247,21 @@
121834
122247
  }
121835
122248
  ]
121836
122249
  },
122250
+ {
122251
+ "name": "CreateEksAnywhereSubscription",
122252
+ "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_CreateEksAnywhereSubscription.html",
122253
+ "permissionOnly": false,
122254
+ "description": "Grants permission to create an EKS Anywhere subscription",
122255
+ "accessLevel": "Write",
122256
+ "resourceTypes": [
122257
+ {
122258
+ "resourceType": "",
122259
+ "required": false,
122260
+ "conditionKeys": [],
122261
+ "dependentActions": []
122262
+ }
122263
+ ]
122264
+ },
121837
122265
  {
121838
122266
  "name": "CreateFargateProfile",
121839
122267
  "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_CreateFargateProfile.html",
@@ -121912,6 +122340,21 @@
121912
122340
  }
121913
122341
  ]
121914
122342
  },
122343
+ {
122344
+ "name": "DeleteEksAnywhereSubscription",
122345
+ "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_DeleteEksAnywhereSubscription.html",
122346
+ "permissionOnly": false,
122347
+ "description": "Grants permission to describe an EKS Anywhere subscription",
122348
+ "accessLevel": "Write",
122349
+ "resourceTypes": [
122350
+ {
122351
+ "resourceType": "eks-anywhere-subscription",
122352
+ "required": true,
122353
+ "conditionKeys": [],
122354
+ "dependentActions": []
122355
+ }
122356
+ ]
122357
+ },
121915
122358
  {
121916
122359
  "name": "DeleteFargateProfile",
121917
122360
  "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_DeleteFargateProfile.html",
@@ -122017,6 +122460,21 @@
122017
122460
  }
122018
122461
  ]
122019
122462
  },
122463
+ {
122464
+ "name": "DescribeEksAnywhereSubscription",
122465
+ "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_DescribeEksAnywhereSubscription.html",
122466
+ "permissionOnly": false,
122467
+ "description": "Grants permission to describe an EKS Anywhere subscription",
122468
+ "accessLevel": "Read",
122469
+ "resourceTypes": [
122470
+ {
122471
+ "resourceType": "eks-anywhere-subscription",
122472
+ "required": true,
122473
+ "conditionKeys": [],
122474
+ "dependentActions": []
122475
+ }
122476
+ ]
122477
+ },
122020
122478
  {
122021
122479
  "name": "DescribeFargateProfile",
122022
122480
  "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_DescribeFargateProfile.html",
@@ -122134,6 +122592,21 @@
122134
122592
  }
122135
122593
  ]
122136
122594
  },
122595
+ {
122596
+ "name": "ListEksAnywhereSubscriptions",
122597
+ "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/ListEksAnywhereSubscriptions.html",
122598
+ "permissionOnly": false,
122599
+ "description": "Grants permission to list EKS Anywhere subscriptions",
122600
+ "accessLevel": "List",
122601
+ "resourceTypes": [
122602
+ {
122603
+ "resourceType": "",
122604
+ "required": false,
122605
+ "conditionKeys": [],
122606
+ "dependentActions": []
122607
+ }
122608
+ ]
122609
+ },
122137
122610
  {
122138
122611
  "name": "ListFargateProfiles",
122139
122612
  "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_ListFargateProfiles.html",
@@ -122198,6 +122671,12 @@
122198
122671
  "conditionKeys": [],
122199
122672
  "dependentActions": []
122200
122673
  },
122674
+ {
122675
+ "resourceType": "eks-anywhere-subscription",
122676
+ "required": false,
122677
+ "conditionKeys": [],
122678
+ "dependentActions": []
122679
+ },
122201
122680
  {
122202
122681
  "resourceType": "fargateprofile",
122203
122682
  "required": false,
@@ -122282,6 +122761,12 @@
122282
122761
  "conditionKeys": [],
122283
122762
  "dependentActions": []
122284
122763
  },
122764
+ {
122765
+ "resourceType": "eks-anywhere-subscription",
122766
+ "required": false,
122767
+ "conditionKeys": [],
122768
+ "dependentActions": []
122769
+ },
122285
122770
  {
122286
122771
  "resourceType": "fargateprofile",
122287
122772
  "required": false,
@@ -122330,6 +122815,12 @@
122330
122815
  "conditionKeys": [],
122331
122816
  "dependentActions": []
122332
122817
  },
122818
+ {
122819
+ "resourceType": "eks-anywhere-subscription",
122820
+ "required": false,
122821
+ "conditionKeys": [],
122822
+ "dependentActions": []
122823
+ },
122333
122824
  {
122334
122825
  "resourceType": "fargateprofile",
122335
122826
  "required": false,
@@ -122403,6 +122894,21 @@
122403
122894
  }
122404
122895
  ]
122405
122896
  },
122897
+ {
122898
+ "name": "UpdateEksAnywhereSubscription",
122899
+ "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_UpdateEksAnywhereSubscription.html",
122900
+ "permissionOnly": false,
122901
+ "description": "Grants permission to update an EKS Anywhere subscription",
122902
+ "accessLevel": "Write",
122903
+ "resourceTypes": [
122904
+ {
122905
+ "resourceType": "eks-anywhere-subscription",
122906
+ "required": true,
122907
+ "conditionKeys": [],
122908
+ "dependentActions": []
122909
+ }
122910
+ ]
122911
+ },
122406
122912
  {
122407
122913
  "name": "UpdateNodegroupConfig",
122408
122914
  "apiReferenceUrl": "https://docs.aws.amazon.com/eks/latest/APIReference/API_UpdateNodegroupConfig.html",
@@ -122474,6 +122980,12 @@
122474
122980
  "conditionKeys": [
122475
122981
  "aws:ResourceTag/${TagKey}"
122476
122982
  ]
122983
+ },
122984
+ {
122985
+ "name": "eks-anywhere-subscription",
122986
+ "apiReferenceUrl": "https://anywhere.eks.amazonaws.com/docs/clustermgmt/support/cluster-license/",
122987
+ "arnPattern": "arn:${Partition}:eks:${Region}:${Account}:eks-anywhere-subscription/${UUID}",
122988
+ "conditionKeys": []
122477
122989
  }
122478
122990
  ],
122479
122991
  "conditionKeys": [
@@ -122559,7 +123071,8 @@
122559
123071
  "required": false,
122560
123072
  "conditionKeys": [
122561
123073
  "aws:ResourceTag/${TagKey}",
122562
- "elasticloadbalancing:ResourceTag/${TagKey}"
123074
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123075
+ "elasticloadbalancing:SecurityGroup"
122563
123076
  ],
122564
123077
  "dependentActions": []
122565
123078
  }
@@ -122583,7 +123096,8 @@
122583
123096
  "required": false,
122584
123097
  "conditionKeys": [
122585
123098
  "aws:ResourceTag/${TagKey}",
122586
- "elasticloadbalancing:ResourceTag/${TagKey}"
123099
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123100
+ "elasticloadbalancing:Subnet"
122587
123101
  ],
122588
123102
  "dependentActions": []
122589
123103
  }
@@ -122683,7 +123197,11 @@
122683
123197
  "aws:RequestTag/${TagKey}",
122684
123198
  "aws:TagKeys",
122685
123199
  "aws:ResourceTag/${TagKey}",
122686
- "elasticloadbalancing:ResourceTag/${TagKey}"
123200
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123201
+ "elasticloadbalancing:SecurityGroup",
123202
+ "elasticloadbalancing:Subnet",
123203
+ "elasticloadbalancing:Scheme",
123204
+ "elasticloadbalancing:ListenerProtocol"
122687
123205
  ],
122688
123206
  "dependentActions": []
122689
123207
  }
@@ -122707,7 +123225,8 @@
122707
123225
  "required": false,
122708
123226
  "conditionKeys": [
122709
123227
  "aws:ResourceTag/${TagKey}",
122710
- "elasticloadbalancing:ResourceTag/${TagKey}"
123228
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123229
+ "elasticloadbalancing:ListenerProtocol"
122711
123230
  ],
122712
123231
  "dependentActions": []
122713
123232
  }
@@ -122731,7 +123250,8 @@
122731
123250
  "required": false,
122732
123251
  "conditionKeys": [
122733
123252
  "aws:ResourceTag/${TagKey}",
122734
- "elasticloadbalancing:ResourceTag/${TagKey}"
123253
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123254
+ "elasticloadbalancing:SecurityPolicy"
122735
123255
  ],
122736
123256
  "dependentActions": []
122737
123257
  }
@@ -123135,7 +123655,8 @@
123135
123655
  "required": false,
123136
123656
  "conditionKeys": [
123137
123657
  "aws:ResourceTag/${TagKey}",
123138
- "elasticloadbalancing:ResourceTag/${TagKey}"
123658
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123659
+ "elasticloadbalancing:SecurityPolicy"
123139
123660
  ],
123140
123661
  "dependentActions": []
123141
123662
  }
@@ -123178,6 +123699,12 @@
123178
123699
  "description": "Filters access by the name of a resource-creating API action",
123179
123700
  "type": "String"
123180
123701
  },
123702
+ {
123703
+ "name": "elasticloadbalancing:ListenerProtocol",
123704
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#listenerprotocol-condition",
123705
+ "description": "Filters access by the listener protocols that are allowed in the request",
123706
+ "type": "ArrayOfString"
123707
+ },
123181
123708
  {
123182
123709
  "name": "elasticloadbalancing:ResourceTag/",
123183
123710
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
@@ -123189,6 +123716,30 @@
123189
123716
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
123190
123717
  "description": "Filters access by the preface string for a tag key and value pair that are attached to a resource",
123191
123718
  "type": "String"
123719
+ },
123720
+ {
123721
+ "name": "elasticloadbalancing:Scheme",
123722
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#scheme-condition",
123723
+ "description": "Filters access by the load balancer scheme that are allowed in the request",
123724
+ "type": "String"
123725
+ },
123726
+ {
123727
+ "name": "elasticloadbalancing:SecurityGroup",
123728
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#securitygroup-condition",
123729
+ "description": "Filters access by the security-group IDs that are allowed in the request",
123730
+ "type": "ArrayOfString"
123731
+ },
123732
+ {
123733
+ "name": "elasticloadbalancing:SecurityPolicy",
123734
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#securitypolicy-condition",
123735
+ "description": "Filters access by the SSL Security Policies that are allowed in the request",
123736
+ "type": "ArrayOfString"
123737
+ },
123738
+ {
123739
+ "name": "elasticloadbalancing:Subnet",
123740
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#subnet-condition",
123741
+ "description": "Filters access by the subnet IDs that are allowed in the request",
123742
+ "type": "ArrayOfString"
123192
123743
  }
123193
123744
  ]
123194
123745
  },
@@ -123318,7 +123869,9 @@
123318
123869
  "aws:RequestTag/${TagKey}",
123319
123870
  "aws:TagKeys",
123320
123871
  "aws:ResourceTag/${TagKey}",
123321
- "elasticloadbalancing:ResourceTag/${TagKey}"
123872
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123873
+ "elasticloadbalancing:SecurityPolicy",
123874
+ "elasticloadbalancing:ListenerProtocol"
123322
123875
  ],
123323
123876
  "dependentActions": []
123324
123877
  }
@@ -123352,7 +123905,10 @@
123352
123905
  "aws:RequestTag/${TagKey}",
123353
123906
  "aws:TagKeys",
123354
123907
  "aws:ResourceTag/${TagKey}",
123355
- "elasticloadbalancing:ResourceTag/${TagKey}"
123908
+ "elasticloadbalancing:ResourceTag/${TagKey}",
123909
+ "elasticloadbalancing:SecurityGroup",
123910
+ "elasticloadbalancing:Subnet",
123911
+ "elasticloadbalancing:Scheme"
123356
123912
  ],
123357
123913
  "dependentActions": []
123358
123914
  }
@@ -123747,7 +124303,9 @@
123747
124303
  "required": false,
123748
124304
  "conditionKeys": [
123749
124305
  "aws:ResourceTag/${TagKey}",
123750
- "elasticloadbalancing:ResourceTag/${TagKey}"
124306
+ "elasticloadbalancing:ResourceTag/${TagKey}",
124307
+ "elasticloadbalancing:SecurityPolicy",
124308
+ "elasticloadbalancing:ListenerProtocol"
123751
124309
  ],
123752
124310
  "dependentActions": []
123753
124311
  }
@@ -124052,7 +124610,8 @@
124052
124610
  "required": false,
124053
124611
  "conditionKeys": [
124054
124612
  "aws:ResourceTag/${TagKey}",
124055
- "elasticloadbalancing:ResourceTag/${TagKey}"
124613
+ "elasticloadbalancing:ResourceTag/${TagKey}",
124614
+ "elasticloadbalancing:SecurityGroup"
124056
124615
  ],
124057
124616
  "dependentActions": []
124058
124617
  }
@@ -124082,7 +124641,8 @@
124082
124641
  "required": false,
124083
124642
  "conditionKeys": [
124084
124643
  "aws:ResourceTag/${TagKey}",
124085
- "elasticloadbalancing:ResourceTag/${TagKey}"
124644
+ "elasticloadbalancing:ResourceTag/${TagKey}",
124645
+ "elasticloadbalancing:Subnet"
124086
124646
  ],
124087
124647
  "dependentActions": []
124088
124648
  }
@@ -124194,11 +124754,41 @@
124194
124754
  "description": "Filters access by the name of a resource-creating API action",
124195
124755
  "type": "String"
124196
124756
  },
124757
+ {
124758
+ "name": "elasticloadbalancing:ListenerProtocol",
124759
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#listenerprotocol-condition",
124760
+ "description": "Filters access by the listener protocol that is allowed in the request",
124761
+ "type": "String"
124762
+ },
124197
124763
  {
124198
124764
  "name": "elasticloadbalancing:ResourceTag/${TagKey}",
124199
124765
  "apiReferenceUrl": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
124200
124766
  "description": "Filters access by the preface string for a tag key and value pair that are attached to a resource",
124201
124767
  "type": "String"
124768
+ },
124769
+ {
124770
+ "name": "elasticloadbalancing:Scheme",
124771
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#scheme-condition",
124772
+ "description": "Filters access by the load balancer scheme that is allowed in the request",
124773
+ "type": "String"
124774
+ },
124775
+ {
124776
+ "name": "elasticloadbalancing:SecurityGroup",
124777
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#securitygroup-condition",
124778
+ "description": "Filters access by the security-group IDs that are allowed in the request",
124779
+ "type": "ArrayOfString"
124780
+ },
124781
+ {
124782
+ "name": "elasticloadbalancing:SecurityPolicy",
124783
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#securitypolicy-condition",
124784
+ "description": "Filters access by the SSL Security Policies that are allowed in the request",
124785
+ "type": "ArrayOfString"
124786
+ },
124787
+ {
124788
+ "name": "elasticloadbalancing:Subnet",
124789
+ "apiReferenceUrl": "https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/security_iam_service-with-iam.html#subnet-condition",
124790
+ "description": "Filters access by the subnet IDs that are allowed in the request",
124791
+ "type": "ArrayOfString"
124202
124792
  }
124203
124793
  ]
124204
124794
  },
@@ -227880,6 +228470,60 @@
227880
228470
  }
227881
228471
  ]
227882
228472
  },
228473
+ {
228474
+ "name": "AWS Partner central account management",
228475
+ "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspartnercentralaccountmanagement.html",
228476
+ "servicePrefix": "partnercentral-account-management",
228477
+ "actions": [
228478
+ {
228479
+ "name": "AssociatePartnerAccount",
228480
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
228481
+ "permissionOnly": true,
228482
+ "description": "Grants permission to associate Partner account to AWS account",
228483
+ "accessLevel": "Write",
228484
+ "resourceTypes": [
228485
+ {
228486
+ "resourceType": "",
228487
+ "required": false,
228488
+ "conditionKeys": [],
228489
+ "dependentActions": []
228490
+ }
228491
+ ]
228492
+ },
228493
+ {
228494
+ "name": "AssociatePartnerUser",
228495
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
228496
+ "permissionOnly": false,
228497
+ "description": "Grants permission to associate Partner user to IAM role",
228498
+ "accessLevel": "Write",
228499
+ "resourceTypes": [
228500
+ {
228501
+ "resourceType": "",
228502
+ "required": false,
228503
+ "conditionKeys": [],
228504
+ "dependentActions": []
228505
+ }
228506
+ ]
228507
+ },
228508
+ {
228509
+ "name": "DisassociatePartnerUser",
228510
+ "apiReferenceUrl": "https://docs.aws.amazon.com/partner-central/latest/getting-started/controlling-access-in-apc-account-management.html",
228511
+ "permissionOnly": false,
228512
+ "description": "Grants permission to disassociate Partner user to IAM role",
228513
+ "accessLevel": "Write",
228514
+ "resourceTypes": [
228515
+ {
228516
+ "resourceType": "",
228517
+ "required": false,
228518
+ "conditionKeys": [],
228519
+ "dependentActions": []
228520
+ }
228521
+ ]
228522
+ }
228523
+ ],
228524
+ "resourceTypes": [],
228525
+ "conditionKeys": []
228526
+ },
227883
228527
  {
227884
228528
  "name": "AWS Payment Cryptography",
227885
228529
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awspaymentcryptography.html",
@@ -242853,6 +243497,12 @@
242853
243497
  "conditionKeys": [],
242854
243498
  "dependentActions": []
242855
243499
  },
243500
+ {
243501
+ "resourceType": "integration",
243502
+ "required": false,
243503
+ "conditionKeys": [],
243504
+ "dependentActions": []
243505
+ },
242856
243506
  {
242857
243507
  "resourceType": "og",
242858
243508
  "required": false,
@@ -242895,6 +243545,12 @@
242895
243545
  "conditionKeys": [],
242896
243546
  "dependentActions": []
242897
243547
  },
243548
+ {
243549
+ "resourceType": "snapshot-tenant-database",
243550
+ "required": false,
243551
+ "conditionKeys": [],
243552
+ "dependentActions": []
243553
+ },
242898
243554
  {
242899
243555
  "resourceType": "subgrp",
242900
243556
  "required": false,
@@ -242907,6 +243563,12 @@
242907
243563
  "conditionKeys": [],
242908
243564
  "dependentActions": []
242909
243565
  },
243566
+ {
243567
+ "resourceType": "tenant-database",
243568
+ "required": false,
243569
+ "conditionKeys": [],
243570
+ "dependentActions": []
243571
+ },
242910
243572
  {
242911
243573
  "resourceType": "",
242912
243574
  "required": false,
@@ -243395,6 +244057,7 @@
243395
244057
  "kms:DescribeKey",
243396
244058
  "kms:GenerateDataKey",
243397
244059
  "rds:AddTagsToResource",
244060
+ "rds:CreateTenantDatabase",
243398
244061
  "secretsmanager:CreateSecret",
243399
244062
  "secretsmanager:TagResource"
243400
244063
  ]
@@ -243437,7 +244100,8 @@
243437
244100
  "aws:RequestTag/${TagKey}",
243438
244101
  "aws:TagKeys",
243439
244102
  "rds:req-tag/${TagKey}",
243440
- "rds:ManageMasterUserPassword"
244103
+ "rds:ManageMasterUserPassword",
244104
+ "rds:MultiTenant"
243441
244105
  ],
243442
244106
  "dependentActions": []
243443
244107
  }
@@ -243451,7 +244115,7 @@
243451
244115
  "accessLevel": "Write",
243452
244116
  "resourceTypes": [
243453
244117
  {
243454
- "resourceType": "db",
244118
+ "resourceType": "cluster",
243455
244119
  "required": true,
243456
244120
  "conditionKeys": [],
243457
244121
  "dependentActions": [
@@ -243459,12 +244123,24 @@
243459
244123
  "rds:AddTagsToResource"
243460
244124
  ]
243461
244125
  },
244126
+ {
244127
+ "resourceType": "db",
244128
+ "required": true,
244129
+ "conditionKeys": [],
244130
+ "dependentActions": []
244131
+ },
243462
244132
  {
243463
244133
  "resourceType": "og",
243464
244134
  "required": true,
243465
244135
  "conditionKeys": [],
243466
244136
  "dependentActions": []
243467
244137
  },
244138
+ {
244139
+ "resourceType": "pg",
244140
+ "required": true,
244141
+ "conditionKeys": [],
244142
+ "dependentActions": []
244143
+ },
243468
244144
  {
243469
244145
  "resourceType": "subgrp",
243470
244146
  "required": true,
@@ -243608,6 +244284,12 @@
243608
244284
  "conditionKeys": [],
243609
244285
  "dependentActions": []
243610
244286
  },
244287
+ {
244288
+ "resourceType": "snapshot-tenant-database",
244289
+ "required": true,
244290
+ "conditionKeys": [],
244291
+ "dependentActions": []
244292
+ },
243611
244293
  {
243612
244294
  "resourceType": "",
243613
244295
  "required": false,
@@ -243696,6 +244378,41 @@
243696
244378
  }
243697
244379
  ]
243698
244380
  },
244381
+ {
244382
+ "name": "CreateIntegration",
244383
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateIntegration.html",
244384
+ "permissionOnly": false,
244385
+ "description": "Grants permission to create an Aurora zero-ETL integration with Redshift",
244386
+ "accessLevel": "Write",
244387
+ "resourceTypes": [
244388
+ {
244389
+ "resourceType": "cluster",
244390
+ "required": true,
244391
+ "conditionKeys": [],
244392
+ "dependentActions": [
244393
+ "kms:CreateGrant",
244394
+ "kms:DescribeKey",
244395
+ "rds:AddTagsToResource"
244396
+ ]
244397
+ },
244398
+ {
244399
+ "resourceType": "integration",
244400
+ "required": true,
244401
+ "conditionKeys": [],
244402
+ "dependentActions": []
244403
+ },
244404
+ {
244405
+ "resourceType": "",
244406
+ "required": false,
244407
+ "conditionKeys": [
244408
+ "aws:RequestTag/${TagKey}",
244409
+ "aws:TagKeys",
244410
+ "rds:req-tag/${TagKey}"
244411
+ ],
244412
+ "dependentActions": []
244413
+ }
244414
+ ]
244415
+ },
243699
244416
  {
243700
244417
  "name": "CreateOptionGroup",
243701
244418
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateOptionGroup.html",
@@ -243723,6 +244440,39 @@
243723
244440
  }
243724
244441
  ]
243725
244442
  },
244443
+ {
244444
+ "name": "CreateTenantDatabase",
244445
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateTenantDatabase.html",
244446
+ "permissionOnly": false,
244447
+ "description": "Grants permission to create a new tenant database",
244448
+ "accessLevel": "Write",
244449
+ "resourceTypes": [
244450
+ {
244451
+ "resourceType": "db",
244452
+ "required": true,
244453
+ "conditionKeys": [],
244454
+ "dependentActions": [
244455
+ "rds:AddTagsToResource"
244456
+ ]
244457
+ },
244458
+ {
244459
+ "resourceType": "tenant-database",
244460
+ "required": true,
244461
+ "conditionKeys": [],
244462
+ "dependentActions": []
244463
+ },
244464
+ {
244465
+ "resourceType": "",
244466
+ "required": false,
244467
+ "conditionKeys": [
244468
+ "aws:RequestTag/${TagKey}",
244469
+ "aws:TagKeys",
244470
+ "rds:TenantDatabaseName"
244471
+ ],
244472
+ "dependentActions": []
244473
+ }
244474
+ ]
244475
+ },
243726
244476
  {
243727
244477
  "name": "CrossRegionCommunication",
243728
244478
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/security_iam_service-with-iam.html#UsingWithRDS.IAM.Conditions",
@@ -243877,7 +244627,9 @@
243877
244627
  "resourceType": "db",
243878
244628
  "required": true,
243879
244629
  "conditionKeys": [],
243880
- "dependentActions": []
244630
+ "dependentActions": [
244631
+ "rds:DeleteTenantDatabase"
244632
+ ]
243881
244633
  }
243882
244634
  ]
243883
244635
  },
@@ -243889,8 +244641,8 @@
243889
244641
  "accessLevel": "Write",
243890
244642
  "resourceTypes": [
243891
244643
  {
243892
- "resourceType": "",
243893
- "required": false,
244644
+ "resourceType": "auto-backup",
244645
+ "required": true,
243894
244646
  "conditionKeys": [],
243895
244647
  "dependentActions": []
243896
244648
  }
@@ -244016,6 +244768,29 @@
244016
244768
  }
244017
244769
  ]
244018
244770
  },
244771
+ {
244772
+ "name": "DeleteIntegration",
244773
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteIntegration.html",
244774
+ "permissionOnly": false,
244775
+ "description": "Grants permission to delete an Aurora zero-ETL integration with Redshift",
244776
+ "accessLevel": "Write",
244777
+ "resourceTypes": [
244778
+ {
244779
+ "resourceType": "integration",
244780
+ "required": true,
244781
+ "conditionKeys": [],
244782
+ "dependentActions": []
244783
+ },
244784
+ {
244785
+ "resourceType": "",
244786
+ "required": false,
244787
+ "conditionKeys": [
244788
+ "aws:ResourceTag/${TagKey}"
244789
+ ],
244790
+ "dependentActions": []
244791
+ }
244792
+ ]
244793
+ },
244019
244794
  {
244020
244795
  "name": "DeleteOptionGroup",
244021
244796
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteOptionGroup.html",
@@ -244031,6 +244806,27 @@
244031
244806
  }
244032
244807
  ]
244033
244808
  },
244809
+ {
244810
+ "name": "DeleteTenantDatabase",
244811
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteTenantDatabase.html",
244812
+ "permissionOnly": false,
244813
+ "description": "Grants permission to delete a tenant database",
244814
+ "accessLevel": "Write",
244815
+ "resourceTypes": [
244816
+ {
244817
+ "resourceType": "db",
244818
+ "required": true,
244819
+ "conditionKeys": [],
244820
+ "dependentActions": []
244821
+ },
244822
+ {
244823
+ "resourceType": "tenant-database",
244824
+ "required": true,
244825
+ "conditionKeys": [],
244826
+ "dependentActions": []
244827
+ }
244828
+ ]
244829
+ },
244034
244830
  {
244035
244831
  "name": "DeregisterDBProxyTargets",
244036
244832
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeregisterDBProxyTargets.html",
@@ -244263,6 +245059,12 @@
244263
245059
  "description": "Grants permission to return a list of automated backups for both current and deleted instances",
244264
245060
  "accessLevel": "List",
244265
245061
  "resourceTypes": [
245062
+ {
245063
+ "resourceType": "auto-backup",
245064
+ "required": false,
245065
+ "conditionKeys": [],
245066
+ "dependentActions": []
245067
+ },
244266
245068
  {
244267
245069
  "resourceType": "db",
244268
245070
  "required": false,
@@ -244481,6 +245283,33 @@
244481
245283
  }
244482
245284
  ]
244483
245285
  },
245286
+ {
245287
+ "name": "DescribeDbSnapshotTenantDatabases",
245288
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBSnapshotTenantDatabases.html",
245289
+ "permissionOnly": false,
245290
+ "description": "Grants permission to return information about tenant databases in DB snapshots. You can filter by Region or snapshot",
245291
+ "accessLevel": "List",
245292
+ "resourceTypes": [
245293
+ {
245294
+ "resourceType": "snapshot-tenant-database",
245295
+ "required": true,
245296
+ "conditionKeys": [],
245297
+ "dependentActions": []
245298
+ },
245299
+ {
245300
+ "resourceType": "db",
245301
+ "required": false,
245302
+ "conditionKeys": [],
245303
+ "dependentActions": []
245304
+ },
245305
+ {
245306
+ "resourceType": "snapshot",
245307
+ "required": false,
245308
+ "conditionKeys": [],
245309
+ "dependentActions": []
245310
+ }
245311
+ ]
245312
+ },
244484
245313
  {
244485
245314
  "name": "DescribeEngineDefaultClusterParameters",
244486
245315
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeEngineDefaultClusterParameters.html",
@@ -244586,6 +245415,29 @@
244586
245415
  }
244587
245416
  ]
244588
245417
  },
245418
+ {
245419
+ "name": "DescribeIntegrations",
245420
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeIntegrations.html",
245421
+ "permissionOnly": false,
245422
+ "description": "Grants permission to describe an Aurora zero-ETL integration with Redshift",
245423
+ "accessLevel": "List",
245424
+ "resourceTypes": [
245425
+ {
245426
+ "resourceType": "integration",
245427
+ "required": true,
245428
+ "conditionKeys": [],
245429
+ "dependentActions": []
245430
+ },
245431
+ {
245432
+ "resourceType": "",
245433
+ "required": false,
245434
+ "conditionKeys": [
245435
+ "aws:ResourceTag/${TagKey}"
245436
+ ],
245437
+ "dependentActions": []
245438
+ }
245439
+ ]
245440
+ },
244589
245441
  {
244590
245442
  "name": "DescribeOptionGroupOptions",
244591
245443
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeOptionGroupOptions.html",
@@ -244727,6 +245579,27 @@
244727
245579
  }
244728
245580
  ]
244729
245581
  },
245582
+ {
245583
+ "name": "DescribeTenantDatabases",
245584
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeTenantDatabases.html",
245585
+ "permissionOnly": false,
245586
+ "description": "Grants permission to return information about provisioned tenant databases. You can filter by Region or snapshot",
245587
+ "accessLevel": "List",
245588
+ "resourceTypes": [
245589
+ {
245590
+ "resourceType": "tenant-database",
245591
+ "required": true,
245592
+ "conditionKeys": [],
245593
+ "dependentActions": []
245594
+ },
245595
+ {
245596
+ "resourceType": "db",
245597
+ "required": false,
245598
+ "conditionKeys": [],
245599
+ "dependentActions": []
245600
+ }
245601
+ ]
245602
+ },
244730
245603
  {
244731
245604
  "name": "DescribeValidDBInstanceModifications",
244732
245605
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeValidDBInstanceModifications.html",
@@ -244857,6 +245730,12 @@
244857
245730
  "conditionKeys": [],
244858
245731
  "dependentActions": []
244859
245732
  },
245733
+ {
245734
+ "resourceType": "integration",
245735
+ "required": false,
245736
+ "conditionKeys": [],
245737
+ "dependentActions": []
245738
+ },
244860
245739
  {
244861
245740
  "resourceType": "og",
244862
245741
  "required": false,
@@ -244899,6 +245778,12 @@
244899
245778
  "conditionKeys": [],
244900
245779
  "dependentActions": []
244901
245780
  },
245781
+ {
245782
+ "resourceType": "snapshot-tenant-database",
245783
+ "required": false,
245784
+ "conditionKeys": [],
245785
+ "dependentActions": []
245786
+ },
244902
245787
  {
244903
245788
  "resourceType": "subgrp",
244904
245789
  "required": false,
@@ -244910,6 +245795,12 @@
244910
245795
  "required": false,
244911
245796
  "conditionKeys": [],
244912
245797
  "dependentActions": []
245798
+ },
245799
+ {
245800
+ "resourceType": "tenant-database",
245801
+ "required": false,
245802
+ "conditionKeys": [],
245803
+ "dependentActions": []
244913
245804
  }
244914
245805
  ]
244915
245806
  },
@@ -245083,6 +245974,8 @@
245083
245974
  "kms:Decrypt",
245084
245975
  "kms:DescribeKey",
245085
245976
  "kms:GenerateDataKey",
245977
+ "rds:AddTagsToResource",
245978
+ "rds:CreateTenantDatabase",
245086
245979
  "secretsmanager:CreateSecret",
245087
245980
  "secretsmanager:RotateSecret",
245088
245981
  "secretsmanager:TagResource"
@@ -245110,7 +246003,8 @@
245110
246003
  "resourceType": "",
245111
246004
  "required": false,
245112
246005
  "conditionKeys": [
245113
- "rds:ManageMasterUserPassword"
246006
+ "rds:ManageMasterUserPassword",
246007
+ "rds:MultiTenant"
245114
246008
  ],
245115
246009
  "dependentActions": []
245116
246010
  }
@@ -245291,6 +246185,35 @@
245291
246185
  }
245292
246186
  ]
245293
246187
  },
246188
+ {
246189
+ "name": "ModifyTenantDatabase",
246190
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyTenantDatabase.html",
246191
+ "permissionOnly": false,
246192
+ "description": "Grants permission to modify a tenant database",
246193
+ "accessLevel": "Write",
246194
+ "resourceTypes": [
246195
+ {
246196
+ "resourceType": "db",
246197
+ "required": true,
246198
+ "conditionKeys": [],
246199
+ "dependentActions": []
246200
+ },
246201
+ {
246202
+ "resourceType": "tenant-database",
246203
+ "required": true,
246204
+ "conditionKeys": [],
246205
+ "dependentActions": []
246206
+ },
246207
+ {
246208
+ "resourceType": "",
246209
+ "required": false,
246210
+ "conditionKeys": [
246211
+ "rds:TenantDatabaseName"
246212
+ ],
246213
+ "dependentActions": []
246214
+ }
246215
+ ]
246216
+ },
245294
246217
  {
245295
246218
  "name": "PromoteReadReplica",
245296
246219
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_PromoteReadReplica.html",
@@ -245517,6 +246440,12 @@
245517
246440
  "conditionKeys": [],
245518
246441
  "dependentActions": []
245519
246442
  },
246443
+ {
246444
+ "resourceType": "integration",
246445
+ "required": false,
246446
+ "conditionKeys": [],
246447
+ "dependentActions": []
246448
+ },
245520
246449
  {
245521
246450
  "resourceType": "og",
245522
246451
  "required": false,
@@ -245559,6 +246488,12 @@
245559
246488
  "conditionKeys": [],
245560
246489
  "dependentActions": []
245561
246490
  },
246491
+ {
246492
+ "resourceType": "snapshot-tenant-database",
246493
+ "required": false,
246494
+ "conditionKeys": [],
246495
+ "dependentActions": []
246496
+ },
245562
246497
  {
245563
246498
  "resourceType": "subgrp",
245564
246499
  "required": false,
@@ -245571,6 +246506,12 @@
245571
246506
  "conditionKeys": [],
245572
246507
  "dependentActions": []
245573
246508
  },
246509
+ {
246510
+ "resourceType": "tenant-database",
246511
+ "required": false,
246512
+ "conditionKeys": [],
246513
+ "dependentActions": []
246514
+ },
245574
246515
  {
245575
246516
  "resourceType": "",
245576
246517
  "required": false,
@@ -245794,7 +246735,8 @@
245794
246735
  "conditionKeys": [],
245795
246736
  "dependentActions": [
245796
246737
  "iam:PassRole",
245797
- "rds:AddTagsToResource"
246738
+ "rds:AddTagsToResource",
246739
+ "rds:CreateTenantDatabase"
245798
246740
  ]
245799
246741
  },
245800
246742
  {
@@ -245900,7 +246842,8 @@
245900
246842
  "conditionKeys": [],
245901
246843
  "dependentActions": [
245902
246844
  "iam:PassRole",
245903
- "rds:AddTagsToResource"
246845
+ "rds:AddTagsToResource",
246846
+ "rds:CreateTenantDatabase"
245904
246847
  ]
245905
246848
  },
245906
246849
  {
@@ -245921,6 +246864,12 @@
245921
246864
  "conditionKeys": [],
245922
246865
  "dependentActions": []
245923
246866
  },
246867
+ {
246868
+ "resourceType": "auto-backup",
246869
+ "required": false,
246870
+ "conditionKeys": [],
246871
+ "dependentActions": []
246872
+ },
245924
246873
  {
245925
246874
  "resourceType": "",
245926
246875
  "required": false,
@@ -246007,6 +246956,12 @@
246007
246956
  "description": "Grants permission to start replication of automated backups to a different AWS Region",
246008
246957
  "accessLevel": "Write",
246009
246958
  "resourceTypes": [
246959
+ {
246960
+ "resourceType": "auto-backup",
246961
+ "required": true,
246962
+ "conditionKeys": [],
246963
+ "dependentActions": []
246964
+ },
246010
246965
  {
246011
246966
  "resourceType": "db",
246012
246967
  "required": true,
@@ -246182,6 +247137,12 @@
246182
247137
  "arnPattern": "arn:${Partition}:rds:${Region}:${Account}:cluster-auto-backup:${DbClusterAutomatedBackupId}",
246183
247138
  "conditionKeys": []
246184
247139
  },
247140
+ {
247141
+ "name": "auto-backup",
247142
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html",
247143
+ "arnPattern": "arn:${Partition}:rds:${Region}:${Account}:auto-backup:${DbInstanceAutomatedBackupId}",
247144
+ "conditionKeys": []
247145
+ },
246185
247146
  {
246186
247147
  "name": "cluster-endpoint",
246187
247148
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.Endpoints.html",
@@ -246339,6 +247300,30 @@
246339
247300
  "conditionKeys": [
246340
247301
  "aws:ResourceTag/${TagKey}"
246341
247302
  ]
247303
+ },
247304
+ {
247305
+ "name": "integration",
247306
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/zero-etl.html",
247307
+ "arnPattern": "arn:${Partition}:rds:${Region}:${Account}:integration:${IntegrationIdentifier}",
247308
+ "conditionKeys": [
247309
+ "aws:ResourceTag/${TagKey}"
247310
+ ]
247311
+ },
247312
+ {
247313
+ "name": "snapshot-tenant-database",
247314
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Oracle.Concepts.single-tenant.snapshots.html#br-cdb.db-snapshots",
247315
+ "arnPattern": "arn:${Partition}:rds:${Region}:${Account}:snapshot-tenant-database:${SnapshotName}:${TenantResourceId}",
247316
+ "conditionKeys": [
247317
+ "aws:ResourceTag/${TagKey}"
247318
+ ]
247319
+ },
247320
+ {
247321
+ "name": "tenant-database",
247322
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Oracle.Concepts.CDBs.html#multi-tenant-configuration",
247323
+ "arnPattern": "arn:${Partition}:rds:${Region}:${Account}:tenant-database:${TenantResourceId}",
247324
+ "conditionKeys": [
247325
+ "aws:ResourceTag/${TagKey}"
247326
+ ]
246342
247327
  }
246343
247328
  ],
246344
247329
  "conditionKeys": [
@@ -246408,6 +247393,12 @@
246408
247393
  "description": "Filters access by the value that specifies whether the DB instance runs in multiple Availability Zones. To indicate that the DB instance is using Multi-AZ, specify true",
246409
247394
  "type": "Bool"
246410
247395
  },
247396
+ {
247397
+ "name": "rds:MultiTenant",
247398
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/security_iam_service-with-iam.html#UsingWithRDS.IAM.Conditions",
247399
+ "description": "Filters access by the value that specifies whether the DB instance is in the multi-tenant configuration",
247400
+ "type": "String"
247401
+ },
246411
247402
  {
246412
247403
  "name": "rds:Piops",
246413
247404
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/security_iam_service-with-iam.html#UsingWithRDS.IAM.Conditions",
@@ -246426,6 +247417,12 @@
246426
247417
  "description": "Filters access by the storage volume size (in GB)",
246427
247418
  "type": "Numeric"
246428
247419
  },
247420
+ {
247421
+ "name": "rds:TenantDatabaseName",
247422
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/security_iam_service-with-iam.html#UsingWithRDS.IAM.Conditions",
247423
+ "description": "Filters access by the tenant database name in CreateTenantDatabase and by the new tenant database name in ModifyTenantDatabase",
247424
+ "type": "String"
247425
+ },
246429
247426
  {
246430
247427
  "name": "rds:Vpc",
246431
247428
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/security_iam_service-with-iam.html#UsingWithRDS.IAM.Conditions",